Security Analyst (PSIRT) for Product/Software Security Test (f/m/div)

Infineon Technologies AG; Portugal; Presencial; EUR 42 000 - 70 000; Tempo integral

Resumo da oferta

Infineon Technologies AG in Portugal seeks a Security Analyst (PSIRT) to lead product and software security testing, vulnerability discovery, and coordination with business teams and external stakeholders.

You will implement pipeline-integrated SAST/DAST, perform vulnerability analysis, support triage and remediation efforts, and collaborate across Cybersecurity and product groups to strengthen Infineon’s product security posture.

Qualificações

• Bachelor's or Master's Degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Knowledge and experience with SAST and DAST methodologies.
• Knowledge and experience in Vulnerability Management, including vulnerability scanning, handling processes, and CVE/CVSS assessment and scoring.
• Knowledge of Software Composition Analysis (SCA) principles and application dependency risk management.
• Knowledge or hands-on experience in Application Penetration Testing within a vulnerability management and product security context.
• Experience in application security engineering, product security, PSIRT activities, and/or scripting and automation using Python, REST APIs, and Git is considered a strong advantage.
• Fluency in English.

Responsabilidades

• Establish and provide overall Product/Software Security Testing services within PSIRT.
• Provide Product Vulnerability Discovery services related to Security Testing, Threat Evaluation, and Orchestration, including assessments.
• Provide pipeline-integrated security testing (SAST/DAST) and vulnerability analysis.
• Coordinate and report with business teams and external stakeholders to support Product Security Vulnerability Handling.
• Support Vulnerability Triages and security analysis within Product Security context.
• Support tooling, automation, and orchestration workflows related to Product Security Vulnerability Processing.
• Collaborate with Cybersecurity and Business stakeholders on implementation initiatives within Product Security Vulnerability Handling.

Conhecimentos

SAST

DAST

Vulnerability Management

Software Composition Analysis

Application Penetration Testing

Python

REST APIs

Git

English Fluency

Formação académica

Bachelor's or Master's Degree in Information Technology, Computer Science, Cybersecurity

Descrição da oferta de emprego

#WeAreIn for jobs that impact everyone's life Behind every success, there is a plan: your strategic thinking, creative skills, and ability to communicate with others will drive innovation and turn ideas into impact. As a Security Analyst (PSIRT) for Product/Software Security Test on our Corporate team, you'll play a vital part in building the frameworks, relationships, and processes that keep Infineon's Business thriving. Are you in?

Your Role

Key responsibilities in your new role

• Responsible for establishing and providing overall Product/Software Security Testing services within the scope of PSIRT
• Provide Product Vulnerability Discovery services related to continuous Security Testing, Threat Evaluation, and Orchestration, including application and platform-level assessments
• Provide pipeline-integrated security testing, review, and evaluation services, including automated Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and vulnerability analysis
• Provide coordination and reporting activities with business teams and external stakeholders/authorities to support overall Product Security Vulnerability Handling
• Support Vulnerability Triage and security analysis activities within a Product Security context
• Support tooling, automation, and orchestration workflows related to Product Security Vulnerability Processing
• Work on implementation initiatives in close collaboration with Cybersecurity and Business stakeholders within the scope of Product Security Vulnerability Handling

Your Profile

Qualifications and skills to help you succeed

You are a detail-oriented and security-minded professional with strong analytical and problem-solving skills. You enjoy identifying vulnerabilities, improving security processes, and partnering with technical and business stakeholders to strengthen product security.

• Bachelor's or Master's Degree in Information Technology, Computer Science, Cybersecurity, or a related field
• Knowledge and experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies
• Knowledge and experience in Vulnerability Management, including vulnerability scanning, handling processes, and CVE/CVSS assessment and scoring
• Knowledge of Software Composition Analysis (SCA) principles and application dependency risk management
• Knowledge or hands-on experience in Application Penetration Testing within a vulnerability management and product security context
• Experience in application security engineering, product security, PSIRT activities, and/or scripting and automation using tools such as Python, REST APIs, and Git is considered a strong advantage
• Fluency in English

#WeAreIn for driving decarbonization and digitalization.

As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game-changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener.

Are you in?

We are on a journey to create the best Infineon for everyone.

This means we embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities. We base our recruiting decisions on the applicant's experience and skills. Learn more about our various contact channels.