Advisory PSIRT Engineer

LenovoAmsterdamHybridFull-time22 Sept 2026

Lenovo is seeking an Advisory PSIRT Engineer in Amsterdam to serve as the central operational orchestrator for vulnerability management across its global product portfolio. The role coordinates product security offices, engineering teams, and suppliers to evaluate, remediate, and disclose vulnerabilities, and supports Cyber Resilience Act compliance. Requires 8+ years of cybersecurity experience, including at least 2 years in an enterprise PSIRT.

What you'll do

Vulnerability Assessment Triage: Evaluate product security vulnerabilities, exploits, and incidents from external researchers, threat intelligence, public disclosures, and internal testing to determine severity, risk, and business impact.
PSIRT Case Management: Manage the end-to-end lifecycle of vulnerability cases from initial intake through technical investigation, remediation progress tracking, and final closure.
Central Operational Orchestration: Coordinate cross-functional vulnerability response efforts across internal product security offices (IDG, ISG, SSG, Motorola, CAIO), Legal, and various business groups.
Supplier Partner Liaison: Collaborate and negotiate with third-party upstream and downstream suppliers, technology partners, and security researchers to develop remediation plans and coordinate responsible disclosures.
Security Advisory Development: Author, review, and publish technical security advisories communicating available fixes, workarounds, and mitigation strategies to customers.
Cross-Functional Communication: Manage internal and customer-facing messaging to ensure accurate, consistent, and timely communication regarding critical vulnerabilities and product security issues.
Cyber Resilience Act (CRA) Compliance: Assist with CRA reporting requirements by identifying actively exploited vulnerabilities or severe incidents, preparing regulatory reports, and participating in readiness exercises.
Threat Intelligence Monitoring: Monitor global vulnerability databases, threat feeds, and third-party notifications to proactively assess emerging risks impacting Lenovo products.
Metrics Continuous Improvement: Develop vulnerability management metrics, drive triage automation initiatives, and contribute to the refinement of team playbooks, SOPs, and governance documentation.

What you need

Must-have

CybersecuritySoftware EngineeringProduct SecurityEnterprise RiskRegulatory ComplianceSecurity OperationsIncident ResponseVulnerability Analysis

Nice-to-have

External Ecosystem EngagementAI SecurityMachine Learning

Soft skills

CommunicationNegotiationCross-Functional CommunicationOperational Flexibility

PSIRTVulnerability ManagementCybersecurityProduct SecurityIncident ResponseThreat IntelligenceCRA ComplianceIT ServicesEngineeringHybrid

/What you'll do

/What you need

Must-have

Nice-to-have

Soft skills

What you'll do

What you need