Advisory PSIRT Engineer

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

Req #

WD00104877

Career area:

Information Technology

Country/Region:

Netherlands

State:

North Holland

City:

Amsterdam

Date:

Thursday, September 10, 2026

Working time:

Full-time

Additional Locations
:

* Romania - Bucureşti - Bucharest

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

The Product Security Advisory Engineer within Lenovo’s Enterprise Product Security Incident Response Team (E-PSIRT) serves as the central operational orchestrator for vulnerability management across Lenovo’s global product portfolio. This critical role coordinates product security offices, engineering teams, and suppliers to ensure vulnerabilities are appropriately evaluated, remediated, and disclosed. Additionally, this position plays a pivotal role in supporting Lenovo’s Cyber Resilience Act (CRA) compliance, vulnerability reporting readiness, and regulatory response activities.

Key Responsibilities

Vulnerability Assessment & Triage:
Evaluate product security vulnerabilities, exploits, and incidents from external researchers, threat intelligence, public disclosures, and internal testing to determine severity, risk, and business impact.

PSIRT Case Management:
Manage the end-to-end lifecycle of vulnerability cases from initial intake through technical investigation, remediation progress tracking, and final closure.

Central Operational Orchestration:
Coordinate cross-functional vulnerability response efforts across internal product security offices (IDG, ISG, SSG, Motorola, CAIO), Legal, and various business groups.

Supplier & Partner Liaison:
Collaborate and negotiate with third-party upstream and downstream suppliers, technology partners, and security researchers to develop remediation plans and coordinate responsible disclosures.

Security Advisory Development:
Author, review, and publish technical security advisories communicating available fixes, workarounds, and mitigation strategies to customers.

Cross-Functional Communication:
Manage internal and customer-facing messaging to ensure accurate, consistent, and timely communication regarding critical vulnerabilities and product security issues.

Cyber Resilience Act (CRA) Compliance:
Assist with CRA reporting requirements by identifying actively exploited vulnerabilities or severe incidents, preparing regulatory reports, and participating in readiness exercises.

Threat Intelligence Monitoring:
Monitor global vulnerability databases, threat feeds, and third-party notifications to proactively assess emerging risks impacting Lenovo products.

Metrics & Continuous Improvement:
Develop vulnerability management metrics, drive triage automation initiatives, and contribute to the refinement of team playbooks, SOPs, and governance documentation.

Qualifications & Requirements

Education:
Bachelor’s degree in Cybersecurity, Information Systems, Systems Engineering, Law, or a highly related technical discipline.

Experience:

8+ years of applied experience
in cybersecurity, software engineering, product security, enterprise risk, or regulatory compliance roles in a team-lead capacity.

Domain Expertise:
Proven capability in security operations, incident response, vulnerability analysis, and/or threat intelligence.

High-Level Communication:
Exceptional written and verbal communication skills tailored for technical teams, senior leadership, and external researchers.

Operational Flexibility:
Availability to support critical cycles with occasional off-hours engagement, alongside intermittent travel for regulatory assessments and stakeholder alignment.

PSIRT Experience:
Prior hands-on experience working within an enterprise Product Security Incident Response Team, with a minimum of 2 years required

Preferred Requirements

External Ecosystem Engagement:
Experience interacting directly with external security researchers, CERTs, regulators, and industry consortiums.

AI Security Knowledge:
Experience handling AI-related vulnerabilities and modern machine learning platform incidents.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.

Additional Locations
:

* Romania - Bucureşti - Bucharest

* Germany, * Netherlands, * Romania, * Slovakia

* Germany - Baden-Württemberg , * Netherlands - North Holland , * Romania - Bucureşti , * Slovakia - Bratislavský

* Romania - Bucureşti - Bucharest , * Slovakia - Bratislavský - Bratislava , * Germany - Baden-Württemberg - Stuttgart , * Netherlands - North Holland - Amsterdam

Apply

Share this job:

⚑ 岗位信息收录自公开招聘页（官方招聘站），以雇主官网为准