Product Security Engineer (PSIRT)

As part of PSIRT (Product Security Incident Response Team) this role will handle and respond to security incidents and vulnerabilities related to its products or services. The main purpose of this role is to identify, assess, prioritize, and respond to vulnerabilities or threats that may impact the security of the organization s offerings. This role will help in building effective PSIRT to ensure greater product security and remediation of identified threats.

Essential Functions:

As an Engineer on the Product Vulnerability Management Team supporting PSIRT capabilities in the Product Cybersecurity Group you will be responsible for:

Threat Intelligence gathering from various sources

Cybersecurity investigation of Toyota / Lexus App vulnerability/incident. (Application and Back End)

Support PSIRT Team with investigation and tracking of identified vulnerabilities (in VVM Jira tool) to improve security posture.

Coordinate with Stakeholders to determine/recommend appropriate remediations/mitigations to reduce security risks.

Tracking of remediation/mitigation progress (in VVM Jira Tool) with Product Leads / Scrum Teams to ensure risk reduction.

Ad-hoc support as a technical expert of PCG services and programs as required.

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Requirements

Competencies:

Proficiency in Engineering (hardware/software) and/or Cybersecurity

Technical analysis and quick decision-making skills

Act with integrity and professionalism

Excellent verbal and written communication skills.

Excellent interpersonal, negotiation, and conflict resolution skills.

Excellent organizational skills, attention to detail

Ability to prioritize tasks and to delegate them when appropriate.

Problem Solving/Analysis skills.

Proficient with Microsoft Office Suite.

Ability to maintain the highest degree of confidentiality and discretion when handling sensitive information.