Security Analyst (PSIRT) for Product Security Vulnerability Handling (f/m/div)

Infineon Technologies AG; Portugal; Presencial; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

Infineon Technologies AG is seeking a Security Analyst (PSIRT) to drive product vulnerability handling, discovery, and coordination with internal teams and external authorities. You will evaluate findings, support monitoring and testing, and help shape our vulnerability disclosure processes.

Ideal candidates have PSIRT exposure, strong technical writing, and fluency in English, with scripting experience in Python, REST APIs, and Git to streamline vulnerability management efforts.

Qualificações

• Bachelor's or Master's in Information Technology, Computer Science, Cybersecurity or related field.
• Knowledge of Vulnerability Handling including Product Vulnerability Management; PSIRT experience is a plus.
• Understanding of vulnerability assessment practices (scanning, CVE, CVSS).
• Familiarity with Coordinated Vulnerability Disclosure processes and advisories.
• Technical writing ability for public advisories and CVEs (non-technical users).
• Scripting/automation experience with Python, REST APIs, and Git is advantageous.
• Fluency in English.

Responsabilidades

• Contribute to the Product Security Vulnerability Handling services within PSIRT.
• Perform Product Vulnerability Discovery activities including intake, scanning, and evaluation.
• Support monitoring and security testing activities with impact assessment and action planning.
• Assist Vulnerability Triaging and analysis in Product Security context.
• Coordinate and report with business and external stakeholders for coordinated vulnerability disclosure.

Conhecimentos

Vulnerability Handling

PSIRT experience

Vulnerability assessment

Coordinated Vulnerability Disclosure

Technical writing

Scripting (Python)

REST APIs

Git

Fluency in English

Formação académica

Bachelor's or Master's in IT/CS/Cybersecurity

Ferramentas

Python

REST APIs

Git

Descrição da oferta de emprego

#WeAreIn for jobs that impact everyone's life Behind every success, there is a plan: your strategic thinking, creative skills, and ability to communicate with others will drive innovation and turn ideas into impact. As a Security Analyst (PSIRT) for Product Security Vulnerability Handling on our Corporate team, you'll play a vital part in building the frameworks, relationships, and processes that keep Infineon's Business thriving. Are you in?

Your Role

Key responsibilities in your new role

• Contribute to the overall Product Security Vulnerability Handling services within the scope of PSIRT
• Perform Product Vulnerability Discovery activities related to Vulnerability Intake, continuous scanning and evaluation
• Support Product Vulnerability Discovery activities related to monitoring and security testing activities via assessing potential initial impact and course of action
• Support Vulnerability Triage and analysis activities in Product Security context
• Provide coordination and reporting activities with business and external stakeholders/authorities for the purposes of coordinated vulnerability disclosure e.g. Finder and Community Engagement
• Provide centralized Product Security Advisory services as part of Vulnerability disclosure
• Work on implementation initiatives with the scope of PSIRT in close collaboration with Cybersecurity and Business peers (Scope Product Vulnerability Management)

Your Profile

Qualifications and skills to help you succeed

• Bachelor's or Master's Degree in Information Technology, Computer Science, Cybersecurity, or a related field
• Knowledge of Vulnerability Handling including Product Vulnerability Management; prior experience in a PSIRT is considered an advantage
• Understanding of vulnerability assessment practices, including vulnerability scanning, CVE identification, and CVSS scoring methodologies
• Familiarity with Coordinated Vulnerability Disclosure (CVD) processes and the publication of security advisories
• Technical writing ability for authoring public advisories and CVEs including for non-technical users, customers, and executives for the purposes of Vulnerability Disclosure/Security Advisory
• Experience with scripting and automation tools, such as Python, REST APIs, and Git, is considered an advantage
• Fluency in English

#WeAreIn for driving decarbonization and digitalization.

As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game-changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener.

Are you in?

We are on a journey to create the best Infineon for everyone.

This means we embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities. We base our recruiting decisions on the applicant's experience and skills. Learn more about our various contact channels.

We look forward to receiving your resume, even if you do not entirely meet all the requirements of the job posting.