The Role
The Arm Product Security Incident Response Team (PSIRT) is looking for a highly motivated, experienced addition to their team, to help deliver on Arm's commitment to coordinated vulnerability disclosure (CVD) and navigate the ever-changing landscape of product security. Growth in this area has created an opportunity join a highly visible and dynamic team at the cutting edge of technology.
Job Overview:
This role is based within the Arm PSIRT and is responsible for managing security vulnerabilities and incidents related to Arm's products and services. We continuously monitor for threats, assess vulnerabilities, coordinate incident response, and facilitate remediation. We also prioritise risks and maintain transparent communication with partners and the community regarding security issues. Arm is committed to maintaining industry-leading product security based on continuous improvement of our organisation's security posture through investments into culture and process.
Responsibilities:
Day-to-day handling of suspected and confirmed vulnerabilities in Arm's portfolio of products using the established incident response process
Support Arm's engineering teams with analysis of reported vulnerabilities, including impact and severity assessments
Lead the development of Arm's vulnerability monitoring capabilities using internal and external sources
Liaise with Arm's engineering teams to facilitate the responsible disclosure of product security vulnerabilities
Engage with ecosystem peers across engineering and security teams to continuously improve Arm's product security processes based on growing industry expectations
Required Skills and Experience :
At least 2 years prior experience in a PSIRT or similar security function
Bachelor's or higher in a related field or equivalent experience
Excellent English written and verbal communication skills with a customer focus and ability to communicate vulnerabilities to a technical level
A good understanding of software, hardware, network, and system security
A good understanding of common classes of vulnerabilities and attack methodologies
Ability and willingness to expand security knowledge into various product spaces
“Nice To Have” Skills and Experience :
Experience with security research in products and ability to apply that knowledge to product security incident response
Experience in software vulnerability management and SDL practices
Prior engagement in working groups or similar with these key bodies FIRST, MITRE, CERT
Experience with ticket management systems such as Jira
Experience with incident management tooling
Experience with scripting languages, such as python
Familiarity Arm's technologies and/or semiconductors/compilers/firmware
In Return:
The Arm PSIRT is a growing and evolving team with senior management visibility and responsibility for business critical processes. Members of this team will be exposed to upper management, having the opportunity to build both internal and external connections including with Arm's partners and collaborators.
#
