Lead Product Security Analyst - PSIRT

BorgWarner - Auburn Hills, MI

Full-time - Mid Level

Auburn Hills, MI

Transportation Equipment Manufacturing

About the position

The Lead Product Security Analyst - PSIRT at BorgWarner is responsible for leading daily operations of the Product Security Incident Response Team (PSIRT). This role involves managing the intake and analysis of product vulnerabilities, coordinating responses, and enhancing incident response plans within the automotive industry. The analyst will collaborate closely with engineering teams to ensure effective communication and resolution of security concerns, while also developing and improving PSIRT documentation and processes.

Responsibilities

• Lead daily operations for PSIRT activities including intake and initial analysis of product security incidents.
• Coordinate inquiries from internal and external stakeholders regarding product security.
• Manage the vulnerability disclosure program and coordinate disclosures.
• Create, audit, and improve PSIRT process documentation and communications deliverables.
• Monitor and communicate realistic expectations of capabilities to stakeholders.
• Build and maintain collaborative relationships with internal functional groups to resolve issues.

Requirements

• Bachelor's degree in computer science, Ethical Hacking/Cyber Security, Computer Forensics, or a STEM field.
• 2+ years of relevant industry experience in incident response, PSIRT, application security, or technical program management.
• Results-driven with the ability to drive project tasks and hold others accountable.
• Excellent facilitation, negotiation, and consensus-building skills.
• Knowledge of automotive cybersecurity/functional safety standards is advised but not necessary.
• Experience in automotive, aerospace, or transportation development is advantageous but not necessary.
• Desirable to hold a recognized security certification (e.g., CEH, CISSP, CISA).
• Excellent communication skills with the ability to convey technical issues to diverse audiences.

Nice-to-haves

• Knowledge of Automotive cybersecurity/Functional Safety standards (e.g., ISO/SAE 21434, ISO26262).
• Experience in automotive, aerospace, or transportation development.