As a member of the Product Security Incident Response Team (PSIRT), this role is responsible for managing and coordinating security incident response activities related to Sensata products and services. This includes ensuring timely detection, analysis, containment, and remediation of cybersecurity incidents. The role also involves detecting cyber threats and incidents involving customers or third‑party partners to assess potential impacts on Sensata products.
General Responsibilities
- Perform security assessments of company products, including vulnerability and risk assessments, threat analysis and security code reviews, to identify potential design and implementation vulnerabilities.
- Design and develop security features for products, including systems, applications, and solutions.
- Integrate new security features and updates into existing products and ensure the security of all products is maintained throughout the product lifecycle.
- Provide product security engineering recommendations and resolve integration and testing issues.
- Build a standardized set of security product requirements and produce metrics to report performance against those requirements.
- Review and define security diagnostics and tools to facilitate the analysis and reporting of security events.
- Detect and mitigate security risks, respond to product security incidents, and work with customers regarding product security related issues.
- Lead or participate in security architecture and design review meetings.
- Detect cyber threats and incidents involving customers or third‑party partners to assess potential impacts on Sensata products.
Experience / Qualifications
- A university degree required (e.g., Bachelor's degree) or equivalent relevant work experience.
- Team player able to work in a fast‑paced environment with demonstrated ability to handle multiple competing tasks and demands.
- Strong communication skills; oral, written and presentation.
- Strong organization, planning and time‑management skills to achieve results.
- Strong personal and professional ethical values and integrity.
- Self‑accountable for achieving goals and standards.
- Proficient in Microsoft Office programs (Outlook, Word, PowerPoint, and Excel).
- Strong interpersonal and collaboration skills to work effectively with all levels of the organization including suppliers and/or external customers.
Basic Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Electrical Engineering, or related technical field.
- 5+ years of experience in embedded/software/application security.
- 3+ years of experience in vulnerability management and incident response.
- Strong knowledge of ISO/SAE 21434, UNECE R155, Cyber Resilience Act, and secure development lifecycle principles.
- Hands‑on experience with penetration testing, fuzzing, and vulnerability scanning tools.
- Knowledge of cryptographic methods, secure boot, secure update, and key management systems.
Preferred Qualifications
- Familiarity with industry‑specific tools and methodologies for vulnerability management and incident response within the product sector.
- Knowledge of scripting languages such as Python, PowerShell, or Bash for automation and tool development.
- Attention to detail and passion for efficient data management and activity tracking.
- Must have Permanent Right to Work in the United Kingdom.
Hybrid role in office three days per week, with occasional travel to the NI location.
#J-18808-Ljbffr