BENGALURU · FULLTIME
PSIRT Analyst - Product Cybersecurity
SA Technologies
Bengaluru · onsite · Posted 4d ago
Sourced from
Undisclosed20–25 yrsfulltimeBengaluru
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
[ { "Remote_Job" : false, "Posting_Title" : "PSIRT Analyst - Product Cybersecurity", "Is_Locked":false,"City": "Bangalore South", "Role": "Development", "Industry": "Manufacturing", "Job_Opening_ID": "SA-22676-JOB", "Job_Description": "
Unlock New Career Horizons with SA Technologies Inc.
Were Hiring: [Position Name] in [Location]
At SA Technologies Inc., we believe in turning career aspirations into reality. As an NSE Listed company , recognized as a CMMI Level 5 organization , a Great Place to Work Certified company , and one of the Best Places for Women , we are committed to creating a workplace that is inclusive, excellent, and supportive
We are looking to onboard one Contingent Workers (CWs) for the below requirement. Please find the key details regarding the work location and working model:
Client: Wabtec Corporation
Job Title: PSIRT Analyst - Product Cybersecurity
Location: Bengaluru, India - Remote
Employment Type: Contingent Worker
Experience: 3-5 Years
Notice Period - Immediate
Budget - 11-12 LPA
Job Summary
Job Summary
Wabtec is seeking a PSIRT Analyst - Product Cybersecurity to join its Product Security Incident Response Team (PSIRT). The role will be responsible for supporting the identification, assessment, triage, and coordination of cybersecurity vulnerabilities and security incidents affecting Wabtecs global product portfolio.
The candidate will work closely with Product Security, Enterprise Information Security, Engineering, Product Development, and other global stakeholders to evaluate vulnerabilities, determine product applicability and risk, coordinate response activities, and support timely communication and remediation.
This position requires a strong understanding of vulnerability management, cybersecurity incident response, threat intelligence, and vulnerability assessment frameworks such as CVE, CWE, and CVSS .
Key Responsibilities
Key Responsibilities
- Monitor and manage PSIRT intake channels, including vulnerability reporting mailboxes, reporting portals, security tools, and dashboards.
- Review, classify, acknowledge, and track reported vulnerabilities and security events in accordance with defined SLAs.
- Perform initial vulnerability validation, applicability assessment, and impact analysis for Wabtec products.
- Analyze vulnerabilities using CVE, CWE, and CVSS methodologies.
- Assess vulnerability severity, exploitability, potential impact, and business/product risk.
- Register and maintain accurate vulnerability records, evidence, status, and required metadata in vulnerability management tools.
- Escalate vulnerabilities and security incidents in accordance with established escalation procedures.
- Coordinate with Product Security, Engineering, Enterprise Information Security, and other stakeholders during vulnerability investigations and response activities.
- Participate in security war rooms and emergency response activities when required.
- Support the development, review, and distribution of security advisories and vulnerability notifications .
- Monitor relevant threat intelligence sources, including CISA KEV, CISA advisories, vendor security notifications, and other trusted sources .
- Conduct threat analysis based on vulnerability characteristics, exploitability, affected products, and available threat intelligence.
- Support the vulnerability disclosure process , including coordination with internal and external stakeholders.
- Participate in a documented on-call rotation to support continuous coverage for product security incidents and vulnerability response.
- Provide regular status updates to management and coordinate escalations during ongoing security incidents.
- Support regulatory and compliance readiness activities, including requirements associated with the European Union Cyber Resilience Act (EU CRA) .
- Participate in tabletop exercises, preparedness activities, lessons learned, and after-action reviews .
- Prepare reports and presentations communicating cybersecurity risks, vulnerability status, incident progress, and response activities to technical and business leadership.
- Maintain appropriate documentation to support audit, compliance, and governance requirements.
Required Qualifications- Bachelors degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or a related technical discipline .
- 3-5 years of relevant cybersecurity experience .
- Hands-on experience in Vulnerability Management, Vulnerability Assessment, Incident Response, Product Security, or PSIRT .
- Strong understanding of the vulnerability management lifecycle, including:
- Vulnerability identification
- Validation
- Risk assessment
- Prioritization
- Escalation
- Remediation tracking
- Closure
- Good working knowledge of:
- CVE - Common Vulnerabilities and Exposures
- CWE - Common Weakness Enumeration
- CVSS - Common Vulnerability Scoring System
- Experience performing vulnerability triage and determining vulnerability applicability and impact.
- Familiarity with threat intelligence and vulnerability intelligence sources .
- Knowledge of CISA KEV, CISA advisories, and vendor security notifications .
- Understanding of cybersecurity incident response processes and escalation procedures.
- Strong analytical, problem-solving, documentation, and communication skills.
- Excellent written and verbal communication skills in English.
- Ability to work independently with minimal supervision and collaborate effectively with global teams.
- Ability to manage multiple priorities and stakeholders in a fast-paced environment.
Preferred Qualifications- Previous experience working in PSIRT or Product Cybersecurity .
- Experience with industrial cybersecurity, OT security, IoT security, embedded systems, or connected products .
- Experience in railway, transportation, automotive, industrial automation, manufacturing, or other product-based industries .
- Knowledge of cybersecurity frameworks and standards such as:
- NIST
- IEC 62443
- ISO 27001 / ISO 27005
- Experience with vulnerability management or security incident management tools.
- Experience supporting security advisories and vulnerability disclosure programs .
- Knowledge of regulatory requirements related to product cybersecurity, particularly the EU Cyber Resilience Act .
- Scripting or automation experience using Python, PowerShell, Bash, or similar technologies .
- Relevant cybersecurity certifications such as Security+, CySA+, GCIH, or equivalent .
Key SkillsMust Have:- Vulnerability Management
- Vulnerability Assessment & Triage
- CVE / CWE / CVSS
- Threat Intelligence
- Incident Response
- Security Incident Coordination
- Risk Assessment
- Vulnerability Disclosure Good to Have:
- PSIRT
- Product Cybersecurity
- Industrial / OT Cybersecurity
- IoT / Embedded Security
- NIST / IEC 62443
- EU Cyber Resilience Act
- Python / PowerShell / Bash
- Security Certifications Why SA Technologies Inc.
Empowering Work Environment: A Great Place to Work, especially celebrated as one of the Best Places for Women.Excellence and Quality: A CMMI Level 5 Company, ensuring operational and service excellence.
- PSIRT
- Vulnerability Management
- NIST
- Previous experience working in PSIRT or Product Cybersecurity .
- CVE - Common Vulnerabilities and Exposures
- Vulnerability identification
- Bachelors degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or a related technical discipline .
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
AutomationBashCyberIEC 62443AutomotiveCisacybersecurity frameworkscmmiGCIHimpact analysisEmbedded SystemsEmbedded SecurityCyber SecurityCommunication SkillscomplianceCybersecurity Certifications
Section · Company
About SA Technologies
SA Technologies
IT Services & Consulting
501-1000
employees
2002
24 years old
San Jose
United States
₹10.9L PA avg
Avg at SA Technologies
About
SA Technologies is an IT Consulting company with 17+ years of experience and a team of 600 experts.
Industries
IT Services & Consulting
Employee ratings
10 reviews
3.5/ 5
Culture
2.3
Career growth
2.3
Work-life
2.5
Employees rate it well for
Work-Life Balance36Compensation & Benefits35
Find them on