Security Analyst (PSIRT) for Product Security Vulnerability Handling (f/m/div)

Infineon Technologies AG; Porto; Presencial; EUR 55 000 - 75 000; Tempo integral

Resumo da oferta

Infineon Technologies AG is seeking a Security Analyst (PSIRT) to strengthen Product Security Vulnerability Handling on the corporate team. You will contribute to vulnerability intake, discovery, triage, and advisory services, coordinating with business and external stakeholders to enable coordinated disclosure and action.

Ideal candidates bring strong communication, technical writing, and vulnerability assessment experience, with scripting skills (Python, REST APIs, Git) and English fluency.

Qualificações

• Bachelor’s or Master’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Knowledge of Vulnerability Handling including Product Vulnerability Management; prior experience in a PSIRT is considered an advantage
• Understanding of vulnerability assessment practices, including vulnerability scanning, CVE identification, and CVSS scoring methodologies
• Familiarity with Coordinated Vulnerability Disclosure (CVD) processes and the publication of security advisories
• Technical writing ability for authoring public advisories and CVEs including for non-technical users, customers, and executives for the purposes of Vulnerability Disclosure/Security Advisory
• Experience with scripting and automation tools, such as Python, REST APIs, and Git
• Fluency in English

Responsabilidades

• Contribute to the overall Product Security Vulnerability Handling services within the scope of PSIRT
• Perform Product Vulnerability Discovery activities related to Vulnerability Intake, continuous scanning and evaluation
• Support Product Vulnerability Discovery activities related to monitoring and security testing activities via assessing potential initial impact and course of action
• Support Vulnerability Triage and analysis activities in Product Security context
• Provide coordination and reporting activities with business and external stakeholders/authorities for the purposes of coordinated vulnerability disclosure e.g. Finder and Community Engagement
• Provide centralized Product Security Advisory services as part of Vulnerability disclosure
• Work on implementation initiatives with the scope of PSIRT in close collaboration with Cybersecurity and Business peers (Scope Product Vulnerability Management)

Conhecimentos

Communication

Stakeholder management

Relationship building

Technical writing

Scripting

English fluency

Formação académica

Bachelor’s or Master’s Degree in Information Technology, Computer Science, Cybersecurity, or related field

Ferramentas

Python

REST APIs

Git

Descrição da oferta de emprego

#WeAreIn for jobs that impact everyone’s life Behind every success, there is a plan: your strategic thinking, creative skills, and ability to communicate with others will drive innovation and turn ideas into impact. As a Security Analyst (PSIRT) for Product Security Vulnerability Handling on our Corporate team, you’ll play a vital part in building the frameworks, relationships, and processes that keep Infineon’s Business thriving. Are you in?

Your Role

Key responsibilities in your new role

• Contribute to the overall Product Security Vulnerability Handling services within the scope of PSIRT
• Perform Product Vulnerability Discovery activities related to Vulnerability Intake, continuous scanning and evaluation
• Support Product Vulnerability Discovery activities related to monitoring and security testing activities via assessing potential initial impact and course of action
• Support Vulnerability Triage and analysis activities in Product Security context
• Provide coordination and reporting activities with business and external stakeholders/authorities for the purposes of coordinated vulnerability disclosure e.g. Finder and Community Engagement
• Provide centralized Product Security Advisory services as part of Vulnerability disclosure
• Work on implementation initiatives with the scope of PSIRT in close collaboration with Cybersecurity and Business peers (Scope Product Vulnerability Management)

Your Profile

Qualifications and skills to help you succeed

You are a collaborative and detail-oriented professional with strong communication and stakeholder management skills, able to build effective relationships across technical and non-technical teams.

• Bachelor’s or Master’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field
• Knowledge of Vulnerability Handling including Product Vulnerability Management; prior experience in a PSIRT is considered an advantage
• Understanding of vulnerability assessment practices, including vulnerability scanning, CVE identification, and CVSS scoring methodologies
• Familiarity with Coordinated Vulnerability Disclosure (CVD) processes and the publication of security advisories
• Technical writing ability for authoring public advisories and CVEs including for non-technical users, customers, and executives for the purposes of Vulnerability Disclosure/Security Advisory
• Experience with scripting and automation tools, such as Python, REST APIs, and Git, is considered an advantage
• Fluency in English

#WeAreIn for driving decarbonization and digitalization.

As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game-changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener. Are you in?

We are on a journey to create the best Infineon for everyone.

This means we embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities. We base our recruiting decisions on the applicant´s experience and skills.

We look forward to receiving your resume, even if you do not entirely meet all the requirements of the job posting.