AI Product Security Engineer Full-time

General Information

Req #

WD00071089

Career area:

Hardware Engineering

Country/Region:

United States of America

State:

North Carolina

City:

Morrisville

Date:

Tuesday, September 10, 2024

Working time:

Full-time

Additional Locations:
* United States of America – North Carolina – Morrisville

Why Work at Lenovo

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$57 billion revenue global technology powerhouse, ranked #248 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com , and read about the latest news via our StoryHub .

Description and Requirements

Description

In this role you will work in the Lenovo Product Security Office as part of the Product Security Incident Response Team (PSIRT). The Product Security Engineer will be responsible for assisting with Lenovo’s response to product security vulnerabilities, including technical analysis, driving remediation by product teams, and publishing security advisories to communicate mitigation instructions to customers. This role will also drive Lenovo’s vulnerability response efforts for AI security vulnerabilities. Other responsibilities include driving improvements in PSIRT tooling and automation.

Responsibilities:

• Perform hands-on investigation to confirm reported security issues in Lenovo products
• Adapt PSIRT processes to support AI security vulnerability response
• Investigate opportunities to leverage AI to drive PSIRT efficiencies
• Support PSIRT security advisory publication processes
• Assign CVE, CWE, and CVSS scoring for vulnerabilities
• Communicate regularly with internal stakeholders, suppliers, customers, and security researchers
• Set direction, drive improvements and provide oversight for PSIRT tooling and automation
• Engage with the PSIRT community through FIRST.org SIGs and MITRE CVE Program

Basic Qualifications:

• Bachelor’s degree or equivalent experience
• 5+ years’ experience working in a technical environment
• Bring a passion to learn and stay on top of cyber security threats and trends
• Excellent oral and written communication skills
• General understanding of AI, application, network, and system security
• Basic ability to read and understand C, C++, C#, Java, Python, or other types of development languages

Preferred Qualifications:

• 3+ years’ experience working in a software development or DevOps role
• Prior working experience with AI technologies
• Prior experience with Python and web frameworks
• Strong organizational skills with attention to detail and ability to multi-task
• Strong sense of task ownership, and persistence to execute processes from beginning to end
• Familiarity with cybersecurity threats, countermeasures, and issues
• Good understanding of the Lenovo organization and ability to successfully work across regions and functions to solve problems and get things done
• Familiarity with Lenovo product lines and PC, data center, and mobile product ecosystems

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.

Additional Locations:
* United States of America – North Carolina – Morrisville

* United States of America

* United States of America – North Carolina

* United States of America – North Carolina – Morrisville