Senior Security Specialist PSIRT

Location Plano Texas USA or Montreal QC Canada or Ottawa ON Canada

Join Ericsson's Product Security Incident Response Team (PSIRT)
Ericsson's PSIRT is the single point of contact for security across all Ericsson products. Our team is responsible for vulnerability management, situational awareness, security incident investigations, and coordination for the entire Ericsson product portfolio.

As a Senior Security Specialist at Ericsson PSIRT, you'll have an exceptional opportunity to learn, grow, and excel in your career. You'll play a crucial role in enhancing the security of Ericsson's product portfolio, managing vulnerabilities, and responding to incidents. You'll collaborate with various internal teams, from product development to customer support, and engage with customer security teams. Additionally, you'll have the chance to contribute to the international security community, including organizations like FIRST, TI/TF-CSIRT, ETIS, and GSMA.

• Vulnerability Management Operations: Primary responsibility to perform daily vulnerability monitoring, alerting, and verification operations.
• Vulnerability & Incident Coordination: Investigate, support, and/or lead product security-related vulnerability coordination and incidents alongside Customer Security Directors, Enterprise Security, and other stakeholders.
• Advisory Role: Act as PSIRT's representative, advising other Ericsson organizations on product security issues.
• Liaison Duties: Communicate effectively with Ericsson's diverse global stakeholders, from technical contacts to higher management.
• Process Improvement: Contribute to and enhance existing end-to-end product security processes from development to customer integrations.

To be successful in the role you must have:

• Strong knowledge and experience with vulnerability management (CVE, CPE, CVSS, CSAF, etc.)
• Firm understanding and preferably experience with Product/IT Security and SDLC practices.
• Perseverance, motivation, and accuracy in performing repetitive vulnerability monitoring tasks.
• Good familiarity with product development and/or product management practices with adequate technical knowledge/experience
• Experience in handling vulnerability disclosures and coordinating incident response.
• Ability to communicate with a global and diverse set of stakeholders in high-stress situations.
• Team Player, Self-starter, independent, innovative, problem solver, and service-minded personality.
• Flexibility & willingness to work across multiple time zones in a virtual team and occasionally support ongoing coordination outside of normal working hours.
• Basic familiarity and technical command over Linux Operating System.
• Basic scripting knowledge and ability to troubleshoot existing code/scripts.
• Minimum of a bachelor's degree in computer science, cybersecurity, information security, telecommunications, or a related technical area, or equivalent practical experience.

You might also have:

Coding capability with a strong focus on automation.
Security certifications such as CompTIA Security+, OSCP, CISM, or CISSP.
Active involvement and contribution to the global security community (e.g., FIRST, TI/TF-CSIRT).

Note: The selected candidate will need to go through mandatory security vetting.

Join us at Ericsson PSIRT and be a part of a team that is at the forefront of product security. Apply now to make a significant impact and advance your career in cybersecurity!