Vulnerability Management Specialist

Location:

- Boblingen - Baden-Wurttemberg, Germany
- Additional Location:

- Garching - Bavaria, Germany - Parking 17, Karlsbad - Baden-Wurttemberg, Germany
- Job Family:

- Digital
- Worker Type Reference:

- Regular - Permanent
- Pay Rate Type:

- Salary
- Career Level:

- P3
- Job ID:

- R-40343-2024

**Description & Requirements**:
**About the Role**

You will work closely with the Vulnerability Manager and collaborate with the CTI automation, pen-testing team, and IT security. The Vulnerability Management team identifies and prioritizes all threats and vulnerabilities in our Product environment and provides respective reports to key stakeholders. If you are passionate about Product Security and want to develop solutions that will secure our enterprise across all Harman lines of business, then we want to talk to you. The nature of this position is a technical security function, not a compliance function.

**What You Will Do**
- Closely collaborate with the Harman global Vulnerability Management (VM) team and ensure smooth operations.
- Drive analysis, rate, and confirm vulnerabilities reported by external researchers, and new technical vulnerabilities according to their business impact, and prioritize remediation activities.
- Drive tasks and root cause analysis for incident response for critical vulnerability
- Mentor less experienced team members in tasks

**What You Need**
- Bachelor’s relevant technical degree; apprenticeship with minimum or 5+ years of practical experience in a cyber security role.
- 3-5+ years of working experience in a technical cybersecurity-related field in a corporate, military, or law enforcement environment.
- Experience in IT, embedded systems, HW testing, threat intelligence, or cyber security in general.
- Honest and professional, strong team influencer, able to proactively support team culture that fosters knowledge sharing, excellence, and collaboration.
- Able to work under pressure, participate in technical discussions, and advise on technical matters.
- Experiences in improving a vulnerability management process, incident response process handling, and/or vulnerability-scanning concepts in OT/ICS, embedded or product environment.
- Knowledge of cyber security standards, risks, threats, prevention measures, and best practices.
- Hands-on experience with programming/scripting languages, e.g. Python, bash, ruby.
- Functional understanding of SW and/or HW.
- Proficiency in Cybersecurity controls, frameworks, terminology, and concepts.

**What is Nice to Have**
- Cybersecurity experience (preferably from IT/OT or IoT/Automotive)
- Knowledge of cybersecurity standards and organizations (CC, FIPS, NIST)
- Risk management knowledge
- Active participation in conferences, consortiums, and CTFs (capture the flag)
- Publications, blogs or reports of past Cybersecurity work
- Knowledge of CSIRT or PSIRT

**What We Offer**
- HARMAN offers a diverse and inclusive work environment that fosters and encourages career development opportunities, professional training and competitive market base compensation
- You will also receive top-notch employee discounts on Harman’s Consumer Audio (JBL, AKG, HARMAN Kardon) and Samsung products
- Flexible work schedule with a culture encouraging work life integration and collaboration in a global friendly working atmosphere and good work-life-balance
- Attractive salary package based on the Metall & Elektro Tarif Baden Wurttemberg and an Employer contribution towards a company pension plan
- Professional development opportunities through HARMAN University’s business and leadership academies which also includes extensive technical trainings
- Internal talent management leadership acceleration programs
- “Be Brilliant” employee recognition and rewards program

LI-Hybrid
LI-NR3

**Important Notice: Recruitment Scams**
- HARMAN is proud to be an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.