Vulnerability & Incident Response Analyst

Monitor vulnerability disclosure channels, PSIRT mailboxes, public vulnerability disclosures, security advisories, and relevant threat intelligence feeds.

Identify vulnerabilities and emerging threats that may impact HBK products and coordinate investigations with relevant stakeholders.

Track Known Exploited Vulnerabilities (KEVs), industry alerts, and security advisories relevant to HBK products and technologies.

Maintain awareness of evolving cybersecurity threats, attacker techniques, and regulatory developments.

Prior experience of Bug bounty portals will be an added advantage.

Coordinate remediation activities with Product Teams, Dev Secops, and Product Security stakeholders.

Track vulnerability remediation progress against defined remediation targets and service level objectives.

Support review of proposed security updates, patches, and mitigation plans.

Produce vulnerability status reports, metrics, and management updates to support governance forums and programme tracking.

Serve as the operational liaison between Product Security, Dev SecOps, Customer Support, Legal, and Product Teams.

Facilitate communication and issue resolution across stakeholders involved in vulnerability management and incident response activities.

Support the implementation and continual improvement of vulnerability management and coordinated vulnerability disclosure processes.

Contribute to regulatory readiness initiatives associated with the EU Cyber Resilience Act and related cybersecurity requirements.

Bachelor’s or master’s degree in cyber security, Computer Science, Information Security, Software Engineering, or a related technical discipline.

Experience working within a Product Security Incident Response Team (PSIRT).

Exposure to regulatory reporting obligations and coordinated vulnerability disclosure programmes.

Experience with vulnerability management automation, DevSecOps pipelines (SAST, DAST integration), SBOM tooling, or software composition analysis platforms.

Familiarity with cloud, desktop, SaaS, embedded, or industrial control system products.

Knowhow on Penetration testing