Head of Product Security: Strategy, Incidents & Leadership

SYSGO AG; Saint-Germain-en-Laye; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Open atmosphere

Permanent employment contract

Training opportunities

Tutor program

Mobile working

Company events

Job summary

SYSGO AG is seeking a Product Security Leader to define and drive security strategy across features and certification roadmaps. You will own budgets, harmonize processes, and lead the security team while signing CE self-declarations on behalf of the organization.

You will manage PSIRT operations, oversee advisories, and coordinate vulnerability tracking tools. Strong leadership and deep OS/embedded security knowledge are essential for success.

Qualifications

• 5+ years in software product security with several years in security management.
• Hands-on familiarity with vulnerability management, including vulnerability scoring and disclosure.
• Experience with security certification frameworks like ISO 21434, IEC 62443, DO-356 CC/EUCC or CRA.
• Strong knowledge of operating systems, embedded systems, hypervisors or safety/security critical software.
• Experience with SBOM formats and management, e.g., SPDX, CycloneDX.
• Leadership experience and strong communication skills to defend security strategy.

Responsibilities

• Define and drive the product security strategy regarding features and certification roadmap; manage budget and resources.
• Harmonize security processes across product lines and lead the product security team.
• Sign the CE self-declaration on behalf of the organization.
• Oversee PSIRT operations end to end, including vulnerability intake, triage and remediation coordination.
• Coordinate publication of security advisories and coordinated disclosure per obligations and agreements.

Skills

Product security leadership

Vulnerability management

Security strategy

Communication

Job description

SYSGO AG is seeking a Product Security Leader to define and drive security strategy across features and certification roadmaps. You will own budgets, harmonize processes, and lead the security team while signing CE self-declarations on behalf of the organization.

You will manage PSIRT operations, oversee advisories, and coordinate vulnerability tracking tools. Strong leadership and deep OS/embedded security knowledge are essential for success.