> Markdown version of [/jobs/ext/4488637-product-security-incident-response-program-manager](https://www.wearedevelopers.com/jobs/ext/4488637-product-security-incident-response-program-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Product Security Incident Response Program Manager

- **Company:** NXP Semiconductors
- **Location:** Graz, Austria (Remote available)
- **Experience:** Starter
- **Salary:** €64,000.0 - €73,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Software as a Service, Cyber Security, Linux, Firmware, Gradle, Python (Programming Language), PostgreSQL, Apache Maven, MySQL, NoSQL, Open Source Technology, Scrum Methodology, SQL Databases, Software Vulnerability Management, Spring-boot, Software Security, Git, Gitlab-ci, Kubernetes, Docker, Microservices
- **Published:** November 1, 2026
- **Apply:** https://devjobs.at/job/88628533e3d4463dfb2fc07a057b47bc

## About the Role

* Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
 * Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.
 * Demonstrated ability to coordinate complex investigations involving multiple technical and business organizations.
 * Strong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting.
 * Excellent communication skills and a passion for protecting innovative technology at scale.
 * Familiarity with embedded products, semiconductor products, firmware, automotive, industrial, or IoT environments is advantageous.
 * PMP, PgMP, Scrum Master, SAFe, or other project/program management certifications are preferred, but not required.
 * Fluent in English, * Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, vulnerability management or technical engineering programs.
 * 3 + years of relevant work experience

## Description

* As a member of NXP's Product Security Incident Response Team, you will lead the operational response to reported vulnerabilities affecting NXP hardware and software products.
 * You will own and drive security cases from initial intake through assessment, remediation coordination, customer communication, and responsible disclosure.
 * This position focuses on program leadership, case management, stakeholder coordination, communication, and continuous improvement.
 * You will bring together engineering, product management, quality, legal, communications, customer-facing teams, and external researchers to ensure that security issues progress toward a timely resolution.
 * Own the operational lifecycle of product vulnerability cases from intake through closure and disclosure.
 * Establish the response plan, milestones, ownership, dependencies, escalation path, and communication cadence for each assigned case.
 * Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing organizations.
 * Track decisions, evidence, approvals, outstanding actions, and delivery risks.
 * Facilitate vulnerability review meetings and drive actions to completion.
 * Coordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and relevant external organizations.
 * Manage CVE reservation and publication workflows in coordination with technical subject-matter experts.
 * Coordinate the creation, review, approval, and publication of security advisories and customer communications.
 * Improve PSIRT procedures, templates, governance, and audit readiness.
 * Support readiness for upcoming regulations such as the EU Cyber Resilience Act (CRA), future standards and vulnerability-reporting obligations., Top
JAAS GmbH·Wien

 + Easy Apply
 + Ab 56k €
 + Full Remote
 + Vollzeit
 + Lead
Du steckst gern tief im Code und willst an einem Produkt bauen, das echten Impact hat? Bei uns arbeitest du hands-on an einer KI-Plattform, die SaaS und On-Prem vereint, ausschließlich auf Open Source setzt und KI on-prem und on-device in sensiblen...

 + Java
 + Python
 + Linux
 + Spring
 + ISO 27001
 + SQL
 + +2
*

Mid-Level Senior Java Developer
Top
DIAMIR ·Wien

 + Easy Apply
 + 50k - 60k €
 + Hybrid
 + Onsite
 + Vollzeit
End-to-End Entwicklung: Du begleitest spannende Softwareprojekte von der ersten Anforderungsanalyse über die Implementierung (zB mit Spring Boot) bis hin zum erfolgreichen Deployment. Microservices & Architektur: Du konzipierst und entwickelst...

 + NoSQL
 + PostgreSQL
 + Kubernetes
 + Java
 + Maven
 + MySQL
 + Git
 + Docker
 + GitLab CI
 + Gradle
 + +6
 + +7

Product Security Incident Response Program Manager