Security Analyst (PSIRT) for Product/Software Security Test (f/m/div)

Infineon Technologies AG; Porto; Presencial; EUR 45 000 - 70 000; Tempo integral

Resumo da oferta

Infineon Technologies AG is seeking a Security Analyst (PSIRT) to lead Product/Software Security Testing across the Corporate team. You will establish testing services, perform vulnerability discovery, and coordinate remediation with business units and authorities.

The role emphasizes security testing pipelines, SAST/DAST, and collaboration with Cybersecurity stakeholders. The right candidate will bring a strong background in vulnerability management, PSIRT activities, and scripting/automation

Qualificações

• Bachelor’s or Master’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Knowledge and experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies.
• Knowledge and experience in Vulnerability Management, including vulnerability scanning, handling processes, and CVE/CVSS assessment and scoring.
• Knowledge of Software Composition Analysis (SCA) principles and application dependency risk management.
• Knowledge or hands-on experience in Application Penetration Testing within a vulnerability management and product security context.
• Experience in application security engineering, product security, PSIRT activities, and/or scripting and automation using tools such as Python, REST APIs, and Git is considered a strong advantage.
• Fluency in English

Responsabilidades

• Establish and provide overall Product/Software Security Testing services within the scope of PSIRT.
• Provide Product Vulnerability Discovery services related to continuous Security Testing, Threat Evaluation, and Orchestration, including application and platform-level assessments.
• Provide pipeline-integrated security testing, review, and evaluation services, including automated SAST, DAST, and vulnerability analysis.
• Coordinate and report activities with business teams and external stakeholders/authorities to support Product Security Vulnerability Handling.
• Support Vulnerability Triage and security analysis activities within a Product Security context.
• Support tooling, automation, and orchestration workflows related to Product Security Vulnerability Processing.
• Collaborate with Cybersecurity and Business stakeholders within the scope of Product Security Vulnerability Handling.

Conhecimentos

SAST/DAST methodologies

Vulnerability management

CVE/CVSS scoring

Penetration testing

Application security engineering

English proficiency

Formação académica

Bachelor’s or Master’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field

Ferramentas

Python

REST APIs

Git

Descrição da oferta de emprego

Behind every success, there is a plan: your strategic thinking, creative skills, and ability to communicate with others will drive innovation and turn ideas into impact. As a Security Analyst (PSIRT) for Product/Software Security Test on our Corporate team, you’ll play a vital part in building the frameworks, relationships, and processes that keep Infineon’s Business thriving.

Your Role

Key responsibilities in your new role

• Responsible for establishing and providing overall Product/Software Security Testing services within the scope of PSIRT
• Provide Product Vulnerability Discovery services related to continuous Security Testing, Threat Evaluation, and Orchestration, including application and platform-level assessments
• Provide pipeline-integrated security testing, review, and evaluation services, including automated Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and vulnerability analysis
• Provide coordination and reporting activities with business teams and external stakeholders/authorities to support overall Product Security Vulnerability Handling
• Support Vulnerability Triage and security analysis activities within a Product Security context
• Support tooling, automation, and orchestration workflows related to Product Security Vulnerability Processing
• Work on implementation initiatives in close collaboration with Cybersecurity and Business stakeholders within the scope of Product Security Vulnerability Handling

Your Profile

You are a detail-oriented and security-minded professional with strong analytical and problem-solving skills. You enjoy identifying vulnerabilities, improving security processes, and partnering with technical and business stakeholders to strengthen product security.

• Bachelor’s or Master’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field
• Knowledge and experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies
• Knowledge and experience in Vulnerability Management, including vulnerability scanning, handling processes, and CVE/CVSS assessment and scoring
• Knowledge of Software Composition Analysis (SCA) principles and application dependency risk management
• Knowledge or hands-on experience in Application Penetration Testing within a vulnerability management and product security context
• Experience in application security engineering, product security, PSIRT activities, and/or scripting and automation using tools such as Python, REST APIs, and Git is considered a strong advantage
• Fluency in English

As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game-changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener.

We are on a journey to create the best Infineon for everyone. This means we embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities. We base our recruiting decisions on the applicant´s experience and skills.

Learn more about our various contact channels.