PSIRT Commander

Job Description

The PSIRT Commander is responsible for coordinating and leading the organization’s response to product cybersecurity vulnerabilities, security incidents, and regulatory reporting obligations. This role serves as the central point of coordination between R&D, Product Security, Compliance, Legal, Customer Communications, and Executive Leadership to ensure the timely assessment, remediation, communication, and closure of product security issues.

In addition to incident management responsibilities, the PSIRT Commander supports product security compliance initiatives, including regulatory readiness activities such as the EU Cyber Resilience Act (CRA), CISA Secure Software Development Attestation, product security assessments, audit preparation, and cybersecurity governance activities. This will be a fully remote position, offering between $60-75/hour depending on experience.

• Drive and coordinate the end-to-end response to reported product security vulnerabilities and cybersecurity incidents.
• Perform initial intake, triage, and severity assessment of security reports.
• Organize and facilitate incident response meetings with technical and business stakeholders.
• Drive decision-making regarding escalation paths, remediation priorities, customer communications, and regulatory reporting obligations.
• Track incident timelines, actions, evidence, and closure activities.
• Coordinate vulnerability disclosures, security advisories, and stakeholder communications.
• Support crisis-level response activities, provide coverage and executive reporting when required.

• Perform regulatory assessments
• Audit support and preparation
• Assessment reporting/tracking
• User documentation
• Confluence updates
• Mailbox monitoring

• Coordinate activities across Product Security, Governance & Compliance, Legal, Customer Support, Quality, and Engineering organizations.
• Facilitate alignment between technical teams and business stakeholders during security events.
• Present incident status, risk assessments, and compliance updates to leadership.
• Drive continuous improvement of PSIRT processes, workflows, and reporting capabilities.
• Partner with R&D, Product Management, Security Champions, and Security teams to assess vulnerabilities and remediation plans.
• Provide guidance on risk evaluation, exploitability, customer impact, and remediation strategies.

• Support implementation and operationalization of product security regulations and frameworks, including:
• EU Cyber Resilience Act (CRA)
• CISA Secure Software Development Attestation
• Vulnerability Disclosure and Coordinated Vulnerability Disclosure (CVD) requirements
• Assist with product security compliance assessments and audit readiness activities.
• Support crisis-level response activities, including on-call coverage and executive reporting during major incidents.
• Contribute to compliance dashboards, metrics, and process improvement initiatives.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during…