PSIRT Lead

Cimcorp Group; Ulvila; On-site; EUR 90,000 - 130,000; Full time

Job summary

Cimcorp Group in Finland seeks a PSIRT Lead to develop and coordinate the company's Product Security Incident Response Team. You will ensure vulnerabilities are identified, assessed, managed and communicated in a structured, timely way.

You will define and maintain the PSIRT operating model, workflows, and escalation processes, and coordinate security cases from initial reporting through remediation and closure. Strong English and cross-functional collaboration required.

Qualifications

• Bachelor's or master's degree in cybersecurity, information technology, software engineering, automation or another relevant field.
• +5 years of relevant experience in product security, cybersecurity, vulnerability management, incident response or system management.
• Experience in product security vulnerability handling, incident coordination and coordinated vulnerability disclosure.
• Good knowledge of secure software and system lifecycle practices, patching, hardening and vulnerability management.
• Experience with Windows and Linux server environments, security monitoring, network and remote access security, and operational escalation.
• Understanding of OT/ICS and industrial automation environments.
• Basic understanding of relevant cybersecurity requirements and standards, such as the Cyber Resilience Act, NIS2, ISO 27001, IEC 62443 and coordinated vulnerability disclosure.
• The ability to coordinate complex security cases from initial reporting to closure.
• Strong prioritization, risk assessment and problem-solving skills.
• The ability to communicate clearly with customers, security researchers, technical experts and senior stakeholders.
• Experience in preparing customer advisories, management reports and other security documentation.
• A structured and practical approach to documentation, case management and process improvement.
• Excellent written and spoken English. Other languages are considered an advantage.

Responsibilities

• Coordinate PSIRT across the organization and with international teams.
• Develop and maintain PSIRT operating model, policies, workflows, playbooks and escalation processes.
• Coordinate security cases from initial reporting through investigation and remediation.
• Prepare customer advisories and management reports.
• Document cases and drive process improvements.

Job description

Are you ready to take the lead in product security and help protect the automation solutions our customers rely on?

We are looking for a PSIRT Lead to develop and coordinate Cimcorp’s Product Security Incident Response Team. You will be responsible for ensuring that product security vulnerabilities are identified, assessed, managed and communicated in a structured and timely way.

As PSIRT Lead, you will define and maintain the PSIRT operating model, including policies, workflows, playbooks, severity models and escalation processes. You will coordinate security cases from initial reporting through investigation, remediation and closure.

What you’ll need to succeed

• A bachelor’s or master’s degree in cybersecurity, information technology, software engineering, automation or another relevant field.
• +5 years of relevant experience in product security, cybersecurity, vulnerability management, incident response or system management.
• Experience in product security vulnerability handling, incident coordination and coordinated vulnerability disclosure.
• Good knowledge of secure software and system lifecycle practices, patching, hardening and vulnerability management.
• Experience with Windows and Linux server environments, security monitoring, network and remote access security, and operational escalation.
• Understanding of OT/ICS and industrial automation environments.
• Basic understanding of relevant cybersecurity requirements and standards, such as the Cyber Resilience Act, NIS2, ISO 27001, IEC 62443 and coordinated vulnerability disclosure.
• The ability to coordinate complex security cases from initial reporting to closure.
• Strong prioritization, risk assessment and problem-solving skills.
• The ability to communicate clearly with customers, security researchers, technical experts and senior stakeholders.
• Experience in preparing customer advisories, management reports and other security documentation.
• A structured and practical approach to documentation, case management and process improvement.
• Excellent written and spoken English. Other languages are considered an advantage.

What you can expect

In this role, you will have a direct impact on the security, reliability and customer trust of Cimcorp’s automation solutions. You will develop the way product security cases are managed across the organisation and work with international teams in a role that combines technical understanding, operational coordination and communication.

You will also support the development of our security practices and regulatory readiness. By analysing recurring cases and security risks, you will help improve vulnerability scanning, testing, secure development and release processes.

For more information about the position, please contact Jani Lindfors, our Head of System Support at [e-mail].