Product Security Response Program Manager

Worker Sub-Type:

Regular

 Job Description: 

POSITION SUMMARY

The incumbent will work within BlackBerry to support potential 3rd party, open source, and other software related product security investigations from identification of potential issues to analysis, mitigation and related communications. From identification to customer solution, this role is the key stakeholder insuring vulnerabilities are re-mediated across BlackBerry’s vast product portfolio. In addition, Program Managers in the organization may assist other internal organizations to understand their risk landscape and remediation and mitigation tactics, delivering vulnerability investigation support.

RESPONSIBILITIES

• Act as a coordinator for product security response efforts. 
• Ownership threat intelligence triage program.
• Assist in quantitatively evaluate and contextualize risk, asses and prioritize response
• efforts.
• Track and report on activities and status to senior management and other stakeholders.
• Extract/extrapolate emergent threats from Internet and private sources, mapping them
• onto a technical footprint.
• Proactively cultivate strong working relationships across the organization and industry
• to ensure effective collaboration on resolving complex, time critical and customer
• impacting security defects.

ESSENTIAL SKILLS AND QUALIFICATIONS

• Understanding of common classes of security vulnerabilities
• Holds a Bachelors degree, OR related and relevant experience
• 2-5 years of experience in software development, project management, or related fields
• General working knowledge of technical specifications and requirements of the software release or hardware component/features
• Experience in driving the resolution of product security vulnerabilities, in conjunction with a variety of stakeholders under compressed timelines
• Effective at managing process and delivery across an organization in rapidly evolving, high pressure situations
• Ability to cultivate productive relationships with external security researchers as well as public and private response communities
• Strong written and verbal communication skills with both technical and non-technical audiences
• Ability to work in a consulting capacity with customers and executives. Cool under pressure, objective and diplomatic
• Exceptional organizational and reporting skills

ADDITIONAL ASSETS

• CISSP designation is an asset

#LI-TH1

Scheduled Weekly Hours:

40