Product Security Officer / PSIRT Lead

BaxEnergy; Acireale; On-site; EUR 90,000 - 130,000; Full time

Job summary

Intellisync seeks a Product Security Officer / PSIRT Lead to define and drive the company’s product security strategy, ensuring cybersecurity and regulatory compliance across its solutions. You will establish and manage PSIRT, define processes for vulnerability management, coordinated vulnerability disclosure and incident response.

You will work with Engineering, Quality, Product Management and DevSecOps to embed Security by Design throughout the lifecycle, report to the CISO, and strengthen the

Qualifications

• Bachelor's or Master's degree in Computer Engineering, Electronics, Cybersecurity or a related technical field, or equivalent professional experience.
• At least 7 years of experience in Product Security, OT Cybersecurity or Industrial Cybersecurity.
• Proven experience with IEC 62443-4-1 and/or Cyber Resilience Act compliance programmes.
• Hands-on experience in PSIRT management, Coordinated Vulnerability Disclosure (CVD), vulnerability handling and security incident management.
• Solid understanding of firmware, embedded systems, industrial communication protocols and control system architectures.
• Experience implementing Secure Development Lifecycle (SDL) processes, threat modelling and Security by Design principles.
• Knowledge of secure boot mechanisms, secure firmware updates, system hardening and credential management.
• Ability to collaborate with multidisciplinary teams and communicate security risks and requirements to both technical stakeholders and senior management.
• Fluent English; Italian is considered a plus.

Responsibilities

• Define and drive the company's product security strategy, ensuring cybersecurity and regulatory compliance across its solutions.
• Establish and manage PSIRT, define processes for vulnerability management, disclosure and incident response.
• Collaborate with Engineering, Quality, Product Management and DevSecOps to embed Security by Design throughout the lifecycle.
• Report to the CISO and contribute to strengthening the Product Security function.

Skills

PSIRT management

CVD coordination

Security by Design

Threat modelling

Firmware security

Industrial cybersecurity

Education

Bachelor's/Master's in Computer Engineering / Electronics / Cybersecurity

Tools

IEC 62443-4-1

Cyber Resilience Act

SDL processes

Job description

We are looking for a Product Security Officer / PSIRT Lead to define and drive the company's product security strategy, ensuring cybersecurity and regulatory compliance across its technological solutions.

• The role will be responsible for establishing and managing the Product Security Incident Response Team (PSIRT), defining processes for vulnerability management, coordinated vulnerability disclosure and security incident response.

• The successful candidate will work closely with Engineering, Quality, Product Management and DevSecOps teams, integrating Security by Design principles and secure development practices throughout the entire solution lifecycle.

• They will contribute to defining and implementing security requirements, ensuring that development, release and maintenance activities comply with relevant standards and regulatory frameworks.

• The position will report directly to the CISO and will play a strategic role in developing and strengthening the company's Product Security function.

• Bachelor's or Master's degree in Computer Engineering, Electronics, Cybersecurity or a related technical field, or equivalent professional experience.

• At least 7 years of experience in Product Security, OT Cybersecurity or Industrial Cybersecurity.

• Proven experience with IEC 62443-4-1 and/or Cyber Resilience Act compliance programmes.

• Hands-on experience in PSIRT management, Coordinated Vulnerability Disclosure (CVD), vulnerability handling and security incident management.

• Solid understanding of firmware, embedded systems, industrial communication protocols and control system architectures.

• Experience implementing Secure Development Lifecycle (SDL) processes, threat modelling and Security by Design principles.

• Knowledge of secure boot mechanisms, secure firmware updates, system hardening and credential management.

• Ability to collaborate with multidisciplinary teams and communicate security risks and requirements to both technical stakeholders and senior management.

• Strong decision-making skills, including the ability to assess and block releases when security requirements are not met.

• Fluent English; Italian is considered a plus.

The selection process is based exclusively on skills, experience, and professional potential. We ensure equal opportunities and do not discriminate on the basis of gender, age, origin, orientation, disability, beliefs, or any other personal characteristic. We promote an inclusive, respectful work environment focused on valuing people.