Product Incident Manager

AYR Global IT Solutions Inc; Philadelphia (Philadelphia County); On-site; USD 85,000 - 120,000; Full time

Job summary

A national staffing firm is seeking a Product Incident Manager in Philadelphia, PA. This role focuses on managing reported product vulnerabilities and coordinating prompt resolutions with internal teams. The ideal candidate will have experience in vulnerability management, incident response, and strong communication skills. Additional expertise in security engineering and familiarity with responsible disclosure practices is essential. Key responsibilities include managing the lifecycle of vulnerabilities and ensuring clear communication with external parties.

Responsibilities

• Serve as a product security incident responder for reported vulnerabilities.
• Manage the lifecycle of security product vulnerabilities.
• Coordinate with internal teams for prompt resolution of issues.
• Ensure responses to external parties are appropriate and timely.

Skills

Experience with vulnerability management

Experience with incident response methodology

Knowledge of systems administration (*nix/Windows)

Comfortable at the command line of a UNIX-like OS

Intermediate understanding of cloud/vm, automation, and devops technology

Ability to process large text files

Knowledge of product development lifecycles

Familiarity with responsible disclosure practices

Ability to collaborate with technical teams

Experience with penetration testing

Knowledge of OWASP top 10 and NVD/CVE

Understanding of validation tools and methodologies

Understanding of common vulnerabilities in agile environments

Experience with software development methodologies

Project Management experience or PMP certification

Knowledge of networking concepts and analysis tools

Ability to perform independent research

Detail-oriented and solution-oriented

Excellent oral and written communication skills

Job description

AYR Global IT Solutions is a national staffing firm focused on cloud, cyber security, web application services, ERP, and BI implementations by providing proven and experienced consultants to our clients. Our competitive, transparent pricing model and industry experience make us a top choice of Global System Integrators and enterprise customers with federal and commercial projects supported nationwide.

Job Description

Job Title: Product Incident Manager

Location: Philadelphia, PA

Duration: 12+ Months

Qualifications

Summary

The Product Security Incident Manager serves as a product security incident responder for reported product vulnerabilities that relate to Clients products. This role will entail managing the lifecycle of externally reported security product vulnerabilities and ensuring that appropriate internal stakeholders are engaged to resolve the reported vulnerabilities. This position will entail managing the queue of reported vulnerabilities, issuing corresponding responses to external reporters, coordinating efforts with internal technical teams to make them aware and hold teams accountable for prompt resolution to issues. This role will interface heavily with Corporate Communications and Legal teams to ensure responses to external parties are appropriate and prompt.

Skill and Abilities

• Experience with vulnerability management
• Experience with incident response methodology in investigations and the groups behind targeted attacks and tactics, techniques, and procedures (TTPs)
• Knowledge of systems administration (*nix/Windows), network engineering, and security engineering
• Must be comfortable at the command line of a UNIX-like OS
• Intermediate level understanding of cloud/vm, automation, and devops technology
• Ability to use tools to process large text files
• Knowledge of product development lifecycles
• Familiarity with responsible disclosure practices
• Ability to work with other technical security and development teams to remediate vulnerabilities
• Experience with penetration testing and/or systems auditing
• Knowledge of OWASP top 10, referring to NVD/CVE, CVSS Scoring
• Intermediate level understanding of validation tools and methodologies (port scanners, etc)
• Intermediate level understanding of common vulnerabilities in large/agile environments
• Experience with software development methodologies and the software used within large/agile environments
• Project Management experience or PMP certification
• Knowledge of networking concepts and analysis tools and operating systems, software, and security controls
• Ability to perform independent research and report on findings
• Ability to be a self-starter, quick learner, and detail oriented
• Ability to perform analysis with strict attention to detail and display solution orientation to learn and adapt quickly
• Possession of excellent oral and written communication skills, including communicating effectively under normal and stressful situations

Additional Information

If anyone might be interest, please share your resume at smalik(at)ayrglobal(dot)com or you can directly contact me at 630-444-7490