PSIRT Analyst - Product Cybersecurity

SA Technologies; India; Remote; INR 1,100,000 - 1,200,000; Full time

Job summary

SA Technologies is hiring a PSIRT Analyst to join Wabtec Corporation's Product Security Incident Response Team (PSIRT). The role centers on vulnerability management, incident response, and coordination across Product Security, Engineering, and Information Security for global product portfolios.

The ideal candidate has 3–5 years of cybersecurity experience, strong analytical skills, and a practical understanding of CVE/CWE/CVSS frameworks.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or a related technical discipline.
• 3-5 years of relevant cybersecurity experience.
• Hands-on experience in Vulnerability Management, Vulnerability Assessment, Incident Response, Product Security, or PSIRT.
• Strong understanding of the vulnerability management lifecycle: identification, validation, risk assessment, prioritization, escalation, remediation tracking, closure.
• Familiarity with threat intelligence and vulnerability intelligence sources such as CVE, CWE, CVSS.

Responsibilities

• Monitor and manage PSIRT intake channels (mailboxes, portals, tools, dashboards).
• Review, classify, acknowledge, and track vulnerabilities and security events per SLAs.
• Perform initial vulnerability validation, applicability assessment, and impact analysis for Wabtec products.
• Analyze vulnerabilities using CVE, CWE, and CVSS methodologies.
• Assess vulnerability severity, exploitability, impact, and risk.
• Register and maintain vulnerability records with metadata in tools.
• Escalate vulnerabilities and incidents per procedures.
• Coordinate with stakeholders during investigations and response activities.
• Participate in security war rooms and emergency response activities when required.
• Prepare reports and advisories communicating risk and status to leadership.

Skills

Vulnerability Management

Incident Response

Product Security

PSIRT

Threat Intelligence

CVSS

CWE

Vulnerability triage

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or related field

Job description

Category: Manufacturing Location: Bangalore South Karnataka India Unlock New Career Horizons with SA Technologies Inc. We're Hiring: [Position Name] in [Location] At SA Technologies Inc., we believe in turning career aspirations into reality. As an NSE Listed company , recognized as a CMMI Level 5 organization , a Great Place to Work Certified company , and one of the Best Places for Women , we are committed to creating a workplace that is inclusive, excellent, and supportive

Job Description: Weare looking to onboard one Contingent Workers (CWs) for the belowrequirement. Please find the key details regarding the work location andworking model: Client: Wabtec Corporation Job Title: PSIRT Analyst - Product Cybersecurity Location: Bengaluru, India - Remote Employment Type: Contingent Worker Experience: 3-5 Years Notice Period - Immediate Budget - 11-12 LPA

Job Summary Wabtec is seeking a PSIRT Analyst - Product Cybersecurity tojoin its Product Security Incident Response Team (PSIRT). The role will beresponsible for supporting the identification, assessment, triage, andcoordination of cybersecurity vulnerabilities and security incidents affectingWabtec's global product portfolio. The candidate will work closely with Product Security, EnterpriseInformation Security, Engineering, Product Development, and other globalstakeholders to evaluate vulnerabilities, determine productapplicability and risk, coordinate response activities, and support timelycommunication and remediation. This position requires a strong understanding of vulnerability management,cybersecurity incident response, threat intelligence, and vulnerabilityassessment frameworks such as CVE, CWE, and CVSS .

KeyResponsibilities

• Monitor and manage PSIRT intake channels, including vulnerability reporting mailboxes, reporting portals, security tools, and dashboards.
• Review, classify, acknowledge, and track reported vulnerabilities and security events in accordance with defined SLAs.
• Perform initial vulnerability validation, applicability assessment, and impact analysis for Wabtec products.
• Analyze vulnerabilities using CVE, CWE, and CVSS methodologies.
• Assess vulnerability severity, exploitability, potential impact, and business/product risk.
• Register and maintain accurate vulnerability records, evidence, status, and required metadata in vulnerability management tools.
• Escalate vulnerabilities and security incidents in accordance with established escalation procedures.
• Coordinate with Product Security, Engineering, Enterprise Information Security, and other stakeholders during vulnerability investigations and response activities.
• Participate in security war rooms and emergency response activities when required.
• Support the development, review, and distribution of security advisories and vulnerability notifications .
• Monitor relevant threat intelligence sources, including CISA KEV, CISA advisories, vendor security notifications, and other trusted sources .
• Conduct threat analysis based on vulnerability characteristics, exploitability, affected products, and available threat intelligence.
• Support the vulnerability disclosure process , including coordination with internal and external stakeholders.
• Participate in a documented on-call rotation to support continuous coverage for product security incidents and vulnerability response.
• Provide regular status updates to management and coordinate escalations during ongoing security incidents.
• Support regulatory and compliance readiness activities, including requirements associated with the European Union Cyber Resilience Act (EU CRA) .
• Participate in tabletop exercises, preparedness activities, lessons learned, and after-action reviews .
• Prepare reports and presentations communicating cybersecurity risks, vulnerability status, incident progress, and response activities to technical and business leadership.
• Maintain appropriate documentation to support audit, compliance, and governance requirements.

RequiredQualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or a related technical discipline .
• 3-5 years of relevant cybersecurity experience .
• Hands-on experience in Vulnerability Management, Vulnerability Assessment, Incident Response, Product Security, or PSIRT .
• Strong understanding of the vulnerability management lifecycle, including: Vulnerability identification Validation Risk assessment Prioritization Escalation Remediation tracking Closure Good working knowledge of: CVE - Common Vulnerabilities and Exposures CWE - Common Weakness Enumeration CVSS - Common Vulnerability Scoring System Experience performing vulnerability triage and determining vulnerability applicability and impact.
• Familiarity with threat intelligence and vulnerability intelligence sources .
• Knowledge of CISA KEV, CISA advisories, and vendor security notifications .
• Understanding of cybersecurity incident response processes and escalation procedures.
• Strong analytical, problem-solving,