Advisory PSIRT Engineer
Hiring in Amsterdam, salary negotiable. This position is part of the Lenovo Product Security Incident Response Team (PSIRT), responsible for coordinating vulnerability management across the global product portfolio. Key responsibilities include assessing and triaging product security vulnerabilities, managing the full lifecycle of vulnerability cases, coordinating with internal product security teams and legal departments, and negotiating remediation plans and responsible disclosure with upstream/downstream suppliers and security researchers. The role also involves drafting and publishing technical security advisories, assisting in meeting the reporting requirements of the Cyber Resilience Act (CRA), and monitoring global vulnerability databases and threat intelligence. Requirements include a bachelor's degree or higher in Cybersecurity, Information Systems, Systems Engineering, Law, or a related field, along with 8+ years of experience in cybersecurity, software engineering, or product security.
该职位隶属于联想企业产品安全事件响应团队，负责统筹全球产品组合的漏洞管理工作。主要职责包括评估与分级产品安全漏洞、管理漏洞案例全生命周期、协调内部产品安全团队与法务等部门，并与上下游供应商及安全研究人员协商修复方案和负责任披露。岗位还需撰写并发布技术安全公告，协助满足《网络弹性法案》的报告要求，并监测全球漏洞数据库与威胁情报。任职要求包括网络安全、信息系统、系统工程或法律等相关专业本科以上学历，以及 8 年以上网络安全、软件工程、产品安全、企业风险或合规领域经验并具备团队领导经历。此外需至少 2 年企业产品安全事件响应团队的实操经验。 公司介绍: 汇总留学生校招信息。