PSIRT Lead - Product Security & Incident Response

Lenovo; Amsterdam; Hybrid; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Disability Insurance Plan

Pension Plan

Employee Referral Bonus

Lenovo/Motorola product discounts

Employee Assistance Program

Job summary

Lenovo in Amsterdam seeks a Product Security Advisory Engineer within the Enterprise Product Security Incident Response Team (E-PSIRT) to orchestrate vulnerability management across Lenovo’s global product portfolio. This role coordinates product security offices, engineering teams, and suppliers to evaluate, remediate, and disclose vulnerabilities, and supports CRA compliance and regulatory responses.

You will drive end-to-end vulnerability case management, liaise with third parties, publish

Qualifications

• Bachelor’s degree in cybersecurity or related field.
• 8+ years in cybersecurity, product security, or regulatory compliance.
• Strong written and verbal communication skills for technical teams and leadership.

Responsibilities

• Evaluate vulnerabilities, incidents, and exploits to determine severity and risk.
• Manage end-to-end lifecycle of vulnerability cases from intake to closure.
• Coordinate cross-functional response with product security offices, Legal, and business groups.
• Collaborate with external researchers and partners to plan remediation and disclosures.
• Develop advisories and communicate fixes, workarounds, and mitigations to customers.
• Support CRA compliance and regulatory reporting readiness.

Skills

Security operations

Incident response

Threat intelligence

Education

Bachelor's degree in Cybersecurity or related field

Job description

Lenovo in Amsterdam seeks a Product Security Advisory Engineer within the Enterprise Product Security Incident Response Team (E-PSIRT) to orchestrate vulnerability management across Lenovo’s global product portfolio. This role coordinates product security offices, engineering teams, and suppliers to evaluate, remediate, and disclose vulnerabilities, and supports CRA compliance and regulatory responses.

You will drive end-to-end vulnerability case management, liaise with third parties, publish