Product Security Incident Lead

AYR Global IT Solutions Inc; Philadelphia (Philadelphia County); On-site; USD 85,000 - 120,000; Full time

Job summary

A national staffing firm is seeking a Product Incident Manager in Philadelphia, PA. This role focuses on managing reported product vulnerabilities and coordinating prompt resolutions with internal teams. The ideal candidate will have experience in vulnerability management, incident response, and strong communication skills. Additional expertise in security engineering and familiarity with responsible disclosure practices is essential. Key responsibilities include managing the lifecycle of vulnerabilities and ensuring clear communication with external parties.

Responsibilities

• Serve as a product security incident responder for reported vulnerabilities.
• Manage the lifecycle of security product vulnerabilities.
• Coordinate with internal teams for prompt resolution of issues.
• Ensure responses to external parties are appropriate and timely.

Skills

Experience with vulnerability management

Experience with incident response methodology

Knowledge of systems administration (*nix/Windows)

Comfortable at the command line of a UNIX-like OS

Intermediate understanding of cloud/vm, automation, and devops technology

Ability to process large text files

Knowledge of product development lifecycles

Familiarity with responsible disclosure practices

Ability to collaborate with technical teams

Experience with penetration testing

Knowledge of OWASP top 10 and NVD/CVE

Understanding of validation tools and methodologies

Understanding of common vulnerabilities in agile environments

Experience with software development methodologies

Project Management experience or PMP certification

Knowledge of networking concepts and analysis tools

Ability to perform independent research

Detail-oriented and solution-oriented

Excellent oral and written communication skills

Job description

A national staffing firm is seeking a Product Incident Manager in Philadelphia, PA. This role focuses on managing reported product vulnerabilities and coordinating prompt resolutions with internal teams. The ideal candidate will have experience in vulnerability management, incident response, and strong communication skills. Additional expertise in security engineering and familiarity with responsible disclosure practices is essential. Key responsibilities include managing the lifecycle of vulnerabilities and ensuring clear communication with external parties.