Product Security IR Analyst, Cyber Security Programs

• The IR Analyst, Product Cybersecurity role is a part of Magnas central Information Security Risk & Compliance (ISRC) team.
• This position will serve as a primary point of contact in matters related to product cybersecurity vulnerability monitoring, management, and reporting.
• The Product Security IR Analyst will be the primary team member from the ISRC to utilize our global threat intelligence & vulnerability management tool.
• This role will work closely with leads from each of our unique business units to coordinate continual cybersecurity activities related to our products.

Your Responsibilities

• Identify potential vulnerabilities in Magnas products by utilizing Magna s cyber threat intelligence and vulnerability management tool.
• Analyze and verify identified vulnerabilities to determine their applicability and relevance to Magnas products.
• Assess the risk level of verified vulnerabilities based on known industry frameworks.
• Collaborate with the product engineering team to facilitate the remediation of vulnerabilities.
• Track and report status of reported vulnerabilities
• Create playbooks and best practices for product cybersecurity incident response
• Stay current with industry best practices and emerging trends in product security to continuously improve Magnas vulnerability management process.

Who we are looking for

• Bachelors degree or equivalent experience in a related technical field
• 4+ years of relevant experience in cybersecurity vulnerability monitoring, management, and/or incident response (automotive product preferred)
• Strong knowledge of product cybersecurity and vulnerability management principles.
• Proficiency in learning and adapting to new, advanced software tools
• Expert knowledge of industry standards related to product cybersecurity & incident response (ISO/SAE 21434 preferred)
• Excellent written and verbal English communication skills
• Comfortable conveying information effectively and professionally to a wide variety of technical and non-technical audiences
• Ability to work collaboratively with diverse teams.
• Enthusiasm for the evolving field of cybersecurity and a desire to continuously learn and improve
• Attention to detail and ability to prioritize tasks effectively.