- Location
- Penang,MY, MY · Malacca, Malacca,MY, MY
- Type
- Full-time
- Department
- Security
- Seniority
- Senior
- Education
- Master
- Source
- Eightfold
Description
Your Role
Key responsibilities in your new role
- Continuous improvement of overall Product Security Vulnerability Handling services within the scope of PSIRT.
- Provide Product Vulnerability Discovery activities related to Vulnerability Intake, continuous scanning and evaluation.
- Support Product Vulnerability Discovery activities related to monitoring and security testing activities via assessing potential initial impact and course of action.
- Support Vulnerability Triage and analysis activities in Product Security context.
- Provide coordination and reporting activities with business and external stakeholders/authorities for the purposes of coordinated vulnerability disclosure e.g. Finder and Community Engagement.
- Provide centralized Product Security Advisory services as part of Vulnerability disclosure.
- Support tooling, automation and orchestration workflows related to Product Security Vulnerability Processing.
- Work on implementation initiatives with the scope of PSIRT in close collaboration with Cybersecurity and Business peers (Scope Product Vulnerability Management).
- Support maturity growth of PSIRT Knowledge Domain Area with Cybersecurity.
Your Profile
Qualifications and skills to help you succeed
- Bachelor or Master in the area of Information Technologies (e.g. Computer Science, Cybersecurity etc.)
- Knowledge in Vulnerability Handling (Product Vulnerability Management and/or previous PSIRT experience are advantages).
- Knowledge in Vulnerability Scanning and CVE/CVSS scoring.
- Understanding of coordinated vulnerability disclosure practices and advisory publication processes.
- Technical writing ability for authoring public advisories and CVEsincl. for non-technical users, customers, and executives for the purposes of Vulnerability Disclosure/Security Advisory.
- Scripting or automation experience (Python, Rest API, Git) is advantage.
- Clear communication (English) skills.
#WeAreIn for driving decarbonization and digitalization.
As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game-changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener.
Are you in?
We are on a journey to create the best Infineon for everyone.
This means we embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities. We base our recruiting decisions on the applicant´s experience and skills. Learn more about our various contact channels.
Please let your recruiter know if they need to pay special attention to something in order to enable your participation in the interview process.
