Product Security Incident Response Lead

Arm Limited; Cambridge; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Arm in Cambridge is seeking a Product Security Engineer to join the Product Security Incident Response Team. You will coordinate vulnerability handling, remediation, and responsible disclosure across Arm products and technologies.

You will work with engineering, legal, communications, researchers, customers and partners to triage, assess, and respond to vulnerabilities, while improving PSIRT processes and strengthening security across a global technology ecosystem.

Qualifications

• Experience in PSIRT or vulnerability disclosure triage.
• Knowledge of CVE processes and severity scoring.
• Ability to communicate across technical and non-technical teams.

Responsibilities

• Drive triage, assessment, and resolution of product security vulnerabilities.
• Lead and coordinate product security incident response across teams.
• Own coordinated vulnerability disclosure activities including CVE assignment.
• Represent Arm in security engagements with researchers and customers.
• Support and evolve Arm's bug bounty programs and researcher engagement.
• Improve PSIRT processes, tooling, metrics, and incident response.
• Safeguard integrity and confidentiality of vulnerability handling.

Skills

PSIRT experience

CVE process knowledge

Vulnerability coordination

Clear communication

Tools

Bug bounty programs

Security incident tooling

Job description

Arm in Cambridge is seeking a Product Security Engineer to join the Product Security Incident Response Team. You will coordinate vulnerability handling, remediation, and responsible disclosure across Arm products and technologies.

You will work with engineering, legal, communications, researchers, customers and partners to triage, assess, and respond to vulnerabilities, while improving PSIRT processes and strengthening security across a global technology ecosystem.