Hybrid Senior Product Security Engineer – Vulnerability Management

Posted 45 minutes ago

Apply now

About the role

  • Senior Product Security Engineer managing security vulnerabilities across Red Hat software and OSS projects. Leading incident response and ensuring compliance with EU Cyber Resilience Act.

Responsibilities

  • Manage and provide timely response and disclosure of security vulnerabilities and incidents across Red Hat software, Fedora, and other OSS projects.
  • Ensure Red Hat Product Security processes and disclosures align with the EU Cyber Resilience Act (CRA) and other relevant regulations.
  • Conduct in-depth risk assessments on vulnerabilities in Red Hat OSS projects and communicate risks effectively to diverse stakeholders (engineers, architects, senior leadership).
  • Contribute to customer-facing security documentation, references, and data, including Common Vulnerabilities and Exposures (CVE) pages and metadata.
  • Provide technical leadership, mentor junior engineers, and drive continuous improvement in vulnerability management practices (e.g., contributing to SBOM generation).
  • Actively participate in relevant OSS working groups to shape and implement industry standards for vulnerability disclosure and coordination.

Requirements

  • 6+ years of experience in cybersecurity incident management and coordination and/or with delivering technology-related software
  • Bachelor’s degree in a technical field
  • Industry certifications like CISSP, CSSLP, CISA/CISM, PMP are a plus
  • Expert knowledge and practical understanding of the Linux Operating System
  • Proven expertise in security vulnerabilities, risk assessment, and the Confidentiality, Integrity, and Availability (CIA) triad
  • Strong change management skills to identify, track, and implement improvements for continuous enhancement of incident response following security events
  • Ability to work effectively and autonomously in a demanding, fast-paced, and culturally diverse environment across multiple time zones
  • Exceptional professional written and verbal communication skills in English.

Benefits

  • Flexible working hours
  • Professional development opportunities

Job title

Senior Product Security Engineer – Vulnerability Management

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

HybridBrnoCzech

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job