Product Security Incident Response Manager (Cybersecurity)

TL;DR

Product Security Incident Response Manager (Cybersecurity): Managing and resolving security vulnerabilities in semiconductor products with an accent on vulnerability triage, risk management, and regulatory compliance. Focus on coordinating responses for Third Party Components (TPS) and Open Source Software (OSS) and streamlining PSIRT workflows.

Location: Gratkorn, Austria (Hybrid)

Company

hirify.global is one of the world's largest industrial security teams, designing and delivering end-to-end security for devices worldwide.

What you will do

• Manage and document reported product vulnerabilities, providing customers with guidance on impact, severity, and mitigation.
• Empower the software development community in managing vulnerabilities in Third Party Components (TPS) and Open Source Software (OSS).
• Lead triage and vulnerability assessments of product security incidents.
• Collaborate with external security researchers, academia, and internal cross-functional teams including engineering, product management, and legal.
• Contribute to new regulations and standardization activities, such as the EU Cyber Resilience Act.
• Own the incident process by managing PSIRT JIRA tickets and monitoring internal and external security sources.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cybersecurity, or a related field.
• Experience in product security incident response and vulnerability management across hardware and software.
• Familiarity with Security Operations Centers (SOC) or PSIRT teams.
• Understanding of security in embedded systems, hardware, and software.
• Knowledge of industry-standard security frameworks, standards, and regulations.
• Must be based in or be able to work from Gratkorn, Austria

Culture & Benefits

• Market competitive compensation aligned with the electronic and semiconductor industry.
• Flexible working hours and home office options.
• Meal benefits.
• Opportunity to work within a high-impact global security team on cutting-edge projects.