Senior PSIRT & Vulnerability Response Engineer

Lenovo; Amsterdam; On-site; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Disability Insurance Plan

Pension Plan

Employee Referral Bonus

Lenovo Employee Discounts

Employee Assistance Program

Job summary

Lenovo is seeking a Product Security Advisory Engineer within the Enterprise Product Security Incident Response Team (E-PSIRT) to orchestrate vulnerability management across Lenovo’s global portfolio. You will coordinate security offices, engineers, and suppliers to evaluate, remediate, and disclose vulnerabilities while supporting CRA compliance.

The role involves triage, case management, advisory development, and cross-functional communication to customers and stakeholders.

Qualifications

• Bachelor’s degree in a relevant field.
• 8+ years of applied cybersecurity experience in related roles.
• Strong written and verbal communication skills for technical and leadership audiences.
• Willingness to support critical cycles with occasional off-hours and travel.

Responsibilities

• Evaluate product security vulnerabilities, exploits, and incidents to determine severity and impact.
• Manage end-to-end lifecycle of vulnerability cases from intake to closure.
• Coordinate cross-functional vulnerability response across security offices, Legal, and business groups.
• Collaborate with suppliers and security researchers to plan remediation and disclosures.
• Author and publish security advisories with fixes, workarounds, and mitigations.
• Communicate with internal teams and customers about vulnerabilities and responses.
• Assist CRA compliance by identifying exploited vulnerabilities and preparing reports.
• Monitor threat intelligence feeds and vulnerability databases for Lenovo products.
• Develop metrics and improve vulnerability management playbooks and processes.

Skills

Vulnerability analysis

Incident response

Security operations

Threat intelligence

Team leadership

Education

Bachelor’s degree in Cybersecurity, Information Systems, Systems Engineering, Law, or related discipline

Job description

Lenovo is seeking a Product Security Advisory Engineer within the Enterprise Product Security Incident Response Team (E-PSIRT) to orchestrate vulnerability management across Lenovo’s global portfolio. You will coordinate security offices, engineers, and suppliers to evaluate, remediate, and disclose vulnerabilities while supporting CRA compliance.

The role involves triage, case management, advisory development, and cross-functional communication to customers and stakeholders.