Why Work at Lenovo
We are Lenovo. We do what we say. We own what we do. We WOW our customers.
Lenovo is a US$57 billion revenue global technology powerhouse, ranked #248 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world's largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo's continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).
Want more jobs like this?
Get Data and Analytics jobs in Morrisville, NC delivered to your inbox every week.
This transformation together with Lenovo's world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.
Description and Requirements
Description
In this role you will work in the Lenovo Product Security Office as part of the Product Security Incident Response Team (PSIRT). The Product Security Engineer will be responsible for assisting with Lenovo's response to product security vulnerabilities, including technical analysis, driving remediation by product teams, and publishing security advisories to communicate mitigation instructions to customers. This role will also drive Lenovo's vulnerability response efforts for AI security vulnerabilities. Other responsibilities include driving improvements in PSIRT tooling and automation.
Responsibilities:
- Perform hands-on investigation to confirm reported security issues in Lenovo products
- Adapt PSIRT processes to support AI security vulnerability response
- Investigate opportunities to leverage AI to drive PSIRT efficiencies
- Support PSIRT security advisory publication processes
- Assign CVE, CWE, and CVSS scoring for vulnerabilities
- Communicate regularly with internal stakeholders, suppliers, customers, and security researchers
- Set direction, drive improvements and provide oversight for PSIRT tooling and automation
- Engage with the PSIRT community through FIRST.org SIGs and MITRE CVE Program
Basic Qualifications:
- Bachelor's degree or equivalent experience
- 5+ years' experience working in a technical environment
- Bring a passion to learn and stay on top of cyber security threats and trends
- Excellent oral and written communication skills
- General understanding of AI, application, network, and system security
- Basic ability to read and understand C, C++, C#, Java, Python, or other types of development languages
Preferred Qualifications:
- 3+ years' experience working in a software development or DevOps role
- Prior working experience with AI technologies
- Prior experience with Python and web frameworks
- Strong organizational skills with attention to detail and ability to multi-task
- Strong sense of task ownership, and persistence to execute processes from beginning to end
- Familiarity with cybersecurity threats, countermeasures, and issues
- Good understanding of the Lenovo organization and ability to successfully work across regions and functions to solve problems and get things done
- Familiarity with Lenovo product lines and PC, data center, and mobile product ecosystems
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.
Additional Locations:
* United States of America - North Carolina - Morrisville