PSIRT Lead

Cimcorp Oy; Ulvila; Remote; EUR 90,000 - 125,000; Full time

Job summary

Cimcorp Oy is seeking a PSIRT Lead to develop and coordinate the Product Security Incident Response Team. You will ensure vulnerabilities are identified, assessed, managed and communicated in a timely manner.

You will define PSIRT operating models, policies and workflows, coordinating cases from report to closure with international teams and stakeholders. English proficiency is essential.

Qualifications

• Bachelor’s or Master’s degree in cybersecurity, information technology, software engineering, automation or a related field.
• +5 years of experience in product security, vulnerability management or incident response.
• Experience with product security vulnerability handling and incident coordination.
• Knowledge of secure software lifecycle, patching and hardening practices.
• Experience with Windows and Linux server environments and security monitoring.
• Understanding of OT/ICS and industrial automation environments.
• Familiarity with Cyber Resilience Act, NIS2, ISO 27001, IEC 62443 and coordinated vulnerability disclosure.
• Ability to coordinate complex security cases end-to-end and communicate with stakeholders.
• Excellent written and spoken English; additional languages are a plus.

Responsibilities

• Develop and coordinate Cimcorp’s Product Security Incident Response Team (PSIRT).
• Define and maintain PSIRT operating model, including policies, workflows and escalation processes.
• Coordinate security cases from initial reporting through investigation, remediation and closure.
• Prepare customer advisories and security documentation.
• Contribute to documentation, case management and process improvement.

Skills

Product security

Incident response

Vulnerability management

Risk assessment

Communication with stakeholders

Documentation

English proficiency

Coordination

Security governance

Education

Bachelor’s or Master’s degree in cybersecurity / IT / software engineering

Job description

Are you ready to take the lead in product security and help protect the automation solutions our customers rely on?

We are looking for a PSIRT Lead to develop and coordinate Cimcorp’s Product Security Incident Response Team. You will be responsible for ensuring that product security vulnerabilities are identified, assessed, managed and communicated in a structured and timely way.

As PSIRT Lead, you will define and maintain the PSIRT operating model, including policies, workflows, playbooks, severity models and escalation processes. You will coordinate security cases from initial reporting through investigation, remediation and closure.

What you’ll need to succeed

• A bachelor’s or master’s degree in cybersecurity, information technology, software engineering, automation or another relevant field.
• +5 years of relevant experience in product security, cybersecurity, vulnerability management, incident response or system management.
• Experience in product security vulnerability handling, incident coordination and coordinated vulnerability disclosure.
• Good knowledge of secure software and system lifecycle practices, patching, hardening and vulnerability management.
• Experience with Windows and Linux server environments, security monitoring, network and remote access security, and operational escalation.
• Understanding of OT/ICS and industrial automation environments.
• Basic understanding of relevant cybersecurity requirements and standards, such as the Cyber Resilience Act, NIS2, ISO 27001, IEC 62443 and coordinated vulnerability disclosure.
• The ability to coordinate complex security cases from initial reporting to closure.
• Strong prioritization, risk assessment and problem-solving skills.
• The ability to communicate clearly with customers, security researchers, technical experts and senior stakeholders.
• Experience in preparing customer advisories, management reports and other security documentation.
• A structured and practical approach to documentation, case management and process improvement.
• Excellent written and spoken English. Other languages are considered an advantage.

What you can expect

In this role, you will have a direct impact on the security, reliability and customer trust of Cimcorp’s automation solutions. You will develop the way product security cases are managed across the organisation and work with international teams in a role that combines technical understanding, operational coordination and communication.

You will also support the development of our security practices and regulatory readiness. By analysing recurring cases and security risks, you will help improve vulnerability scanning, testing, secure development and release processes.

Interested?

For more information about the position, please contact Jani Lindfors, our Head of System Support, at [e-mail]