Head of Product Security (m/w/d)

SYSGO AG; Saint-Germain-en-Laye; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Open atmosphere

Permanent employment contract

Training opportunities

Tutor program

Mobile working

Company events

Job summary

SYSGO AG is seeking a Product Security Leader to define and drive security strategy across features and certification roadmaps. You will own budgets, harmonize processes, and lead the security team while signing CE self-declarations on behalf of the organization.

You will manage PSIRT operations, oversee advisories, and coordinate vulnerability tracking tools. Strong leadership and deep OS/embedded security knowledge are essential for success.

Qualifications

• 5+ years in software product security with several years in security management.
• Hands-on familiarity with vulnerability management, including vulnerability scoring and disclosure.
• Experience with security certification frameworks like ISO 21434, IEC 62443, DO-356 CC/EUCC or CRA.
• Strong knowledge of operating systems, embedded systems, hypervisors or safety/security critical software.
• Experience with SBOM formats and management, e.g., SPDX, CycloneDX.
• Leadership experience and strong communication skills to defend security strategy.

Responsibilities

• Define and drive the product security strategy regarding features and certification roadmap; manage budget and resources.
• Harmonize security processes across product lines and lead the product security team.
• Sign the CE self-declaration on behalf of the organization.
• Oversee PSIRT operations end to end, including vulnerability intake, triage and remediation coordination.
• Coordinate publication of security advisories and coordinated disclosure per obligations and agreements.

Skills

Product security leadership

Vulnerability management

Security strategy

Communication

Job description

Your Tasks

Strategy and Leadership

• Define and drive the product security strategy regarding features and certification roadmap in consultation with the Head of Product Engineering and VP of Product Strategy & Innovation
• Own budget and resource planning for product security certification
• Harmonize security processes across product lines
• Lead and grow the product security team
• Sign the CE self-declaration on behalf of the organization

Vulnerability & Incident Response

• Own the PSIRT operations end to end: vulnerability intake monitoring, triage and validation, and remediation coordination with product engineering
• Supervise and sign-off publication of security advisories and coordinated disclosure according to legal obligations and customer specific agreements
• Coordinate the definition, selection and implementation of vulnerability tracking and reporting tools

Your Profile

• Significant experience (5+ years) in software product security with several years in security management
• Hands‑on familiarity with vulnerability management, including vulnerability scoring and disclosure
• Experience with security certification frameworks like ISO 21434, IEC 62443, DO-356 CC/EUCC or CRA
• Strong knowledge on operating systems, embedded systems, hypervisors or other types of safety and security critical software
• Experience with SBOM formats and management, e.g., SPDX, CycloneDX
• Leadership experience, communication skills and the capability to defend the security strategy internally and externally

We offer

• An open, cooperative and particularly good working atmosphere
• A permanent employment contract in a modern, well-equipped workplace
• Exciting tasks and individual training opportunities
• Tutor and introduction week during the initial training period
• Mobile working
• Company events