Senior Analyst Cyber Security PSIRT

Infineon Technologies; Penang; On-site; MYR 120,000 - 180,000; Full time

Job summary

Infineon Technologies in Penang is seeking a Product Security role focused on vulnerability handling within PSIRT. You will drive discovery, evaluation, and triage of vulnerabilities, coordinating with stakeholders for coordinated disclosure and publishing advisories for both technical and executive audiences.

You will support tooling, automation, and processes to enhance vulnerability processing and collaborate with Cybersecurity and business peers to grow PSIRT maturity.

Qualifications

• Bachelor or Master in IT (CS, Cybersecurity) or equivalent.
• Experience in Vulnerability Handling or PSIRT is advantageous.
• Experience with Vulnerability Scanning and CVE/CVSS scoring.
• Understanding coordinated vulnerability disclosure and advisory publication.
• Technical writing for public advisories and CVEs for non-technical audiences.
• Scripting or automation experience (Python, REST API, Git) is advantageous.
• Clear English communication skills.

Responsibilities

• Continuous improvement of PSIRT vulnerability handling services.
• Conduct product vulnerability discovery activities and evaluations.
• Support monitoring and security testing through impact assessments.
• Assist vulnerability triage and analysis in Product Security context.
• Coordinate and report with stakeholders on coordinated disclosure.
• Provide centralized Product Security Advisory services as part of disclosure.
• Support tooling, automation, and orchestration for vulnerability processing.
• Collaborate with Cybersecurity and Business peers on PSIRT initiatives.
• Contribute to PSIRT maturity with Cybersecurity teams.

Skills

Vulnerability handling

Vulnerability scanning

Coordinated disclosure

Technical writing

Scripting/automation

English communication

Education

Bachelor/Master in IT

Job description

Key responsibilities in your new role

• Continuous improvement of overall Product Security Vulnerability Handling services within the scope of PSIRT.
• Provide Product Vulnerability Discovery activities related to Vulnerability Intake, continuous scanning and evaluation.
• Support Product Vulnerability Discovery activities related to monitoring and security testing activities via assessing potential initial impact and course of action.
• Support Vulnerability Triage and analysis activities in Product Security context.
• Provide coordination and reporting activities with business and external stakeholders/authorities for the purposes of coordinated vulnerability disclosure (e.g., Finder and Community Engagement).
• Provide centralized Product Security Advisory services as part of Vulnerability disclosure.
• Support tooling, automation and orchestration workflows related to Product Security Vulnerability Processing.
• Work on implementation initiatives within the scope of PSIRT in close collaboration with Cybersecurity and Business peers (Scope Product Vulnerability Management).
• Support maturity growth of PSIRT Knowledge Domain Area with Cybersecurity.

Qualifications and skills

• Bachelor or Master in the area of Information Technologies (e.g., Computer Science, Cybersecurity, etc.).
• Knowledge in Vulnerability Handling (Product Vulnerability Management and/or previous PSIRT experience are advantages).
• Knowledge in Vulnerability Scanning and CVE/CVSS scoring.
• Understanding of coordinated vulnerability disclosure practices and advisory publication processes.
• Technical writing ability for authoring public advisories and CVEsincl. for non-technical users, customers, and executives for the purposes of Vulnerability Disclosure/Security Advisory.
• Scripting or automation experience (Python, Rest API, Git) is advantage.
• Clear communication (English) skills.

We Are In for driving decarbonization and digitalization

As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game‑changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener.

We are on a journey to create the best Infineon for everyone

This means we embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities. We base our recruiting decisions on the applicant´s experience and skills. Learn more about our various contact channels.

Please let your recruiter know if they need to pay special attention to something in order to enable your participation in the interview process.