{"id":139241,"title":"Head of Product Security (m/w/d)","company":"Karriere Board | SYSGO GmbH","city":"Klein-Winternheim","region":"Rheinland-Pfalz","location":"Klein-Winternheim, Rheinland-Pfalz","work_model":"unknown","employment_type":"full_time","employment":["full_time"],"roles":["security","leadership"],"visa":"not_mentioned","relocation":"not_mentioned","posted_at":"2026-10-28T14:02:41.482000+00:00","tools":["Embedded Systems"],"seniority":"lead","years_experience_min":5,"german_requirement":"not_mentioned","german_level":"unspecified","english_requirement":"required","english_level":"unspecified","team_language":"unknown","confidence":0.4,"method":"rules","language_badge":"Not stated","language_evidence":null,"requirements_snippet":"· Significant experience (5+ years) in software product security with several years in security management · Hands-on familiarity with vulnerability management, including vulnerability scoring and disclosure · Experience with …","url":"https://sysgo.softgarden.io/job/67561607/Head-of-Product-Security-m-w-d-","source":"softgarden","agency":null,"description_text":"Your Tasks\nStrategy and Leadership\n· Define and drive the product security strategy regarding features and certification roadmap in consultation with the Head of Product Engineering and VP of Product Strategy & Innovation\n· Own budget and resource planning for product security certification\n· Harmonize security processes across product lines\n· Lead and grow the product security team\n· Sign the CE self-declaration on behalf of the organization\nVulnerability & Incident Response\n· Own the PSIRT operations end to end: vulnerability intake monitoring, triage and validation, and remediation coordination with product engineering\n· Supervise and sign-off publication of security advisories and coordinated disclosure according to legal obligations and customer specific agreements\n· Coordinate the definition, selection and implementation of vulnerability tracking and reporting tools\n\nYour Profile\n· Significant experience (5+ years) in software product security with several years in security management\n· Hands-on familiarity with vulnerability management, including vulnerability scoring and disclosure\n· Experience with security certification frameworks like ISO 21434, IEC 62443, DO-356 CC/EUCC or CRA\n· Strong knowledge on operating systems, embedded systems, hypervisors or other types of safety and security critical software\n· Experience with SBOM formats and management, e.g., SPDX, CycloneDX\n· Leadership experience, communication skills and the capability to defend the security strategy internally and externally\n\nWe offer\n• An open, cooperative and particularly good working atmosphere\n• A permanent employment contract in a modern, well-equipped workplace\n• Exciting tasks and individual training opportunities\n• Tutor and introduction week during the initial training period\n• Mobile working\n• Company events","responsibilities_text":"Strategy and Leadership\n· Define and drive the product security strategy regarding features and certification roadmap in consultation with the Head of Product Engineering and VP of Product Strategy & Innovation\n· Own budget and resource planning for product security certification\n· Harmonize security processes across product lines\n· Lead and grow the product security team\n· Sign the CE self-declaration on behalf of the organization\nVulnerability & Incident Response\n· Own the PSIRT operations end to end: vulnerability intake monitoring, triage and validation, and remediation coordination with product engineering\n· Supervise and sign-off publication of security advisories and coordinated disclosure according to legal obligations and customer specific agreements\n· Coordinate the definition, selection and implementation of vulnerability tracking and reporting tools","requirements_text":"· Significant experience (5+ years) in software product security with several years in security management\n· Hands-on familiarity with vulnerability management, including vulnerability scoring and disclosure\n· Experience with security certification frameworks like ISO 21434, IEC 62443, DO-356 CC/EUCC or CRA\n· Strong knowledge on operating systems, embedded systems, hypervisors or other types of safety and security critical software\n· Experience with SBOM formats and management, e.g., SPDX, CycloneDX\n· Leadership experience, communication skills and the capability to defend the security strategy internally and externally\nWe offer\n• An open, cooperative and particularly good working atmosphere\n• A permanent employment contract in a modern, well-equipped workplace\n• Exciting tasks and individual training opportunities\n• Tutor and introduction week during the initial training period\n• Mobile working\n• Company events","status":"open","duplicate_of":null,"first_seen":"2026-11-04T14:32:19.838670+00:00","responsibilities_summary":null,"requirements_summary":null,"all_tools":["Embedded Systems"],"posting_language":"en","evidence":[],"years_experience_max":null,"mobility_evidence":[],"model_version":"rules-8","english_badge":"English required","company_id":18719}