Lead Product Security Incident Response Engineer

Lenovo; Morrisville (NC); On-site; USD 127,000 - 195,000; Full time

Job summary

Lenovo is seeking a Product Security Advisory Engineer in the Enterprise Product Security Incident Response Team (E-PSIRT) to assess, triage, coordinate, and track vulnerabilities across Lenovo's global product portfolio.

This role acts as the central orchestrator for vulnerability activities, coordinating security offices, engineering teams, suppliers, and stakeholders to ensure timely remediation, disclosure, and regulatory reporting.

Qualifications

• Bachelor's degree or equivalent in a technical field.
• 5+ years in cybersecurity, product security, or related roles.
• Experience with vulnerability management and regulatory reporting.

Responsibilities

• Assess vulnerabilities, triage incidents, and coordinate investigations
• Manage PSIRT cases from intake to closure and track remediation
• Coordinate with security offices, engineering teams, suppliers, and stakeholders
• Support CRA compliance activities and regulatory reporting readiness
• Develop advisories, publish mitigation guidance, and communicate with customers

Skills

Cybersecurity

Security operations

Incident response

Threat intelligence

Communication skills

Regulatory compliance

Collaboration

Education

Bachelor's degree in cybersecurity or related field

Job description

Lenovo is seeking a Product Security Advisory Engineer in the Enterprise Product Security Incident Response Team (E-PSIRT) to assess, triage, coordinate, and track vulnerabilities across Lenovo's global product portfolio.

This role acts as the central orchestrator for vulnerability activities, coordinating security offices, engineering teams, suppliers, and stakeholders to ensure timely remediation, disclosure, and regulatory reporting.