Security Analyst (PSIRT) for Product Security Vulnerability Handling (f/m/div)

#WeAreIn for jobs that impact everyone’s life Behind every success, there is a plan: your strategic thinking, creative skills, and ability to communicate with others will drive innovation and turn ideas into impact. As a Security Analyst (PSIRT) for Product Security Vulnerability Handling on our Corporate team, you’ll play a vital part in building the frameworks, relationships, and processes that keep Infineon’s Business thriving. Are you in?

Your Role

Key responsibilities in your new role

• Contribute to the overall Product Security Vulnerability Handling services within the scope of PSIRT
• Perform Product Vulnerability Discovery activities related to Vulnerability Intake, continuous scanning and evaluation
• Support Product Vulnerability Discovery activities related to monitoring and security testing activities via assessing potential initial impact and course of action
• Support Vulnerability Triage and analysis activities in Product Security context
• Provide coordination and reporting activities with business and external stakeholders/authorities for the purposes of coordinated vulnerability disclosure e.g. Finder and Community Engagement
• Provide centralized Product Security Advisory services as part of Vulnerability disclosure
• Work on implementation initiatives with the scope of PSIRT in close collaboration with Cybersecurity and Business peers (Scope Product Vulnerability Management)

Your Profile

Qualifications and skills to help you succeed

You are a collaborative and detail-oriented professional with strong communication and stakeholder management skills, able to build effective relationships across technical and non-technical teams.

• Bachelor’s or Master’s Degree in Information Technology, Computer Science, Cybersecurity, or a related field
• Knowledge of Vulnerability Handling including Product Vulnerability Management; prior experience in a PSIRT is considered an advantage
• Understanding of vulnerability assessment practices, including vulnerability scanning, CVE identification, and CVSS scoring methodologies
• Familiarity with Coordinated Vulnerability Disclosure (CVD) processes and the publication of security advisories
• Technical writing ability for authoring public advisories and CVEs including for non-technical users, customers, and executives for the purposes of Vulnerability Disclosure/Security Advisory
• Experience with scripting and automation tools, such as Python, REST APIs, and Git, is considered an advantage
• Fluency in English

Please send us your CV in English.

Contact:
Luis Oliveira, LinkedIn

#WeAreIn for driving decarbonization and digitalization.
As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game-changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener.
Are you in?

We are on a journey to create the best Infineon for everyone.
This means we embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities. We base our recruiting decisions on the applicant´s experience and skills. Learn more about our various contact channels.
We look forward to receiving your resume, even if you do not entirely meet all the requirements of the job posting.
Please let your recruiter know if they need to pay special attention to something in order to enable your participation in the interview process.
Click here for more information about Diversity & Inclusion at Infineon.