Associate - Vulnerability and Incident Management

Job Summary

Introduction: A Career at Harman Automotive

We are a global, multidisciplinary team leveraging the innovative power of technology to transform the future. At Harman Automotive, we provide the opportunities, resources, and support to help fast-track your career.

• Engineer audio systems and integrated technology platforms that enhance the driving experience.
• Combine ingenuity, in-depth research, and a collaborative spirit with design and engineering excellence.
• Advance in-vehicle infotainment, safety, efficiency, and enjoyment.

What You'll Be Part Of

The Vulnerability and Incident Management Associate role represents Harman's commitment to detecting, assessing, and remediating cybersecurity issues in its products.

Reporting to the Manager of the Product Security Incident Response Team (PSIRT), this role collaborates closely with IT Security, product development and maintenance teams, cybersecurity authorities, and industry groups to drive Harman's response to cybersecurity incidents and emerging threats.

The successful candidate will continuously adapt and adopt new tools, processes, and solutions to help keep users and their products secure. If you are passionate about solving interdisciplinary challenges while working with renowned brands such as JBL, Mark Levinson, Harman Kardon, and AKG, we would love to hear from you.

How You'll Make an Impact

• Collaborate closely with IT Security, global vulnerability and incident management teams, and development and maintenance teams to drive the resolution of vulnerabilities and incidents affecting Harman products.
• Drive communication and coordination related to incidents with third parties, including OEMs, suppliers, and numbering authorities.
• Produce security advisories, bulletins, and reports related to vulnerabilities and incidents.
• Support the adoption and enhancement of security tools and processes.
• Continuously improve ways of working related to threat intelligence, vulnerability analysis, and incident response.
• Act as a process and technology advisor during vulnerability and incident response activities, supporting teams in making informed decisions.
• Mentor junior team members and contribute to their professional development.
• Support the PSIRT Manager in ensuring the smooth day-to-day operations of the team.
• Champion team culture and promote Harman's values.

What Makes You a Strong Fit

• 2-4 years of hands-on experience in cybersecurity or a related technical field.
• Ability to work effectively in time-sensitive situations while demonstrating professionalism and integrity.
• Proven ability to influence stakeholders without direct authority and foster cross-functional collaboration.
• Experience in IT, embedded systems, threat intelligence, or cybersecurity.
• Experience working within OT/ICS, embedded systems, or product cybersecurity environments.
• Strong understanding of cybersecurity standards, risks, vulnerabilities, and mitigation strategies.
• Excellent written and verbal communication skills.
• Strong foundation in incident management and security operations.
• Proficiency in English at a C1-C2 level.
• Demonstrated contributions to team culture, process improvements, and knowledge-sharing initiatives.
• Ability to self-manage priorities while coordinating and guiding junior team members when required.

Bonus Points If You Have

• Bachelors or Masters degree in a relevant technical discipline, along with 2+ years of cybersecurity experience.
• SANS GIAC certifications in a cybersecurity discipline, particularly incident handling certifications, or equivalent credentials.
• Knowledge of and experience with risk management practices.
• Proficiency in scripting languages, low-code platforms, or security tooling configuration.
• Knowledge of predictive and Agile project management methodologies.
• Conversational and/or technical proficiency in German.
• Active participation in cybersecurity conferences, consortiums, or Capture the Flag competitions.
• Knowledge of CSIRT PSIRT or FIRST practices and operating models.
• A portfolio showcasing previous cybersecurity work, publications, or presentations.

Things to Know

• Willingness to travel 10-20% of the time, both domestically and internationally.
• Willingness to work from the Bangalore, India office.