Information Security Incident Analyst

Job Description:

We are Omnissa! 

The world is evolving fast, and organizations everywhere—from corporations to schools—are under immense pressure to provide flexible, work-from-anywhere solutions. They need IT infrastructure that empowers employees and customers to access applications from any device, on any cloud, all while maintaining top-tier security. That’s where Omnissa comes in. 
 

The Omnissa Platform is the first AI-driven digital work platform that enables smart, seamless and secure work experiences from anywhere. It uniquely integrates multiple industry-leading solutions including Unified Endpoint Management, Virtual Apps and Desktops, Digital Employee Experience, and Security & Compliance through common data, identity, administration, and automation services. Built on the vision of autonomous workspaces - self configuring, self-healing, and self-securing - Omnissa continuously adapts to the way people work; delivering personalized and engaging employee experiences, while optimizing security, IT operations and costs. we're experiencing rapid growth—and this is just the beginning of our journey!
 

At Omnissa, we’re driven by a shared mission to maximize value for our customers. Our five Core Values guide us: Act in Alignment, Build Trust, Foster Inclusiveness, Drive Efficiency, and Maximize Customer Value—all with the aim of achieving shared success for our clients and our team. 
 

As a global private company with over 4,000 employees, we’re always looking for passionate, talented individuals to join us. If you're ready to make an impact and help shape the future of work, we’d love to hear from you! 

What is the opportunity?

Required Skills

• 6 to 12 years in product security, PSIRT, vulnerability response, or security incident response, including coordination of multi-team remediation under time pressure.
• Hands-on experience running or coordinating security incidents and vulnerability disclosures end to end.
• Working knowledge of CVSS, CWE, CVE/CNA processes, VEX, SBOM, and ISO/IEC 29147 and 30111 concepts.
• Ability to investigate vulnerabilities and exploits and understand common classes (OWASP Top 10, CWE Top 25).
• Practical experience using AI tooling in security operations workflows, with sound judgment on validation and data protection.
• Ability to translate business objectives into execution strategy and prioritize in a dynamic environment.
• Excellent written and verbal communication, including executive briefings.
• Self-motivated and effective across functional teams.
• Bachelor's degree in computer science, information systems, risk management, or a similar field strongly preferred

  .
  

The Work: What type of work will you be doing?

1. Vulnerability response and incident coordination

• Own end-to-end coordination of externally reported and actively exploited product vulnerabilities, from intake and triage through remediation, coordinated disclosure, and customer communication, for on-premises and SaaS products.
• Act as incident coordinator for high-severity product security events: set severity, run the bridge, assign owners, track timelines, and drive decisions with Engineering, Product, Support, Legal, and Communications.
• Coordinate security engineers and external stakeholders (researchers, CERTs, vendors, customers, coordinators) to remediate high-profile vulnerabilities within tight timeframes.
• Run coordinated disclosure, including embargo management, CVE assignment, advisory publication, and researcher relations.
• Perform RCCA and post-incident reviews, and present findings and trends to executive staff.

2. AI-driven vulnerability operations

• Design, deploy, and govern AI-assisted workflows for intake deduplication, triage, exploitability and impact analysis, severity scoring, and advisory drafting, with human review at decision points.
• Evaluate and operationalize AI-enabled tooling and automation to raise speed and scale while managing accuracy, hallucination, data handling, and tenant-isolation risks.
• Triage and respond to the rising volume of AI-generated vulnerability reports, including low-quality submissions, and to AI-accelerated exploitation that shortens the time from disclosure to attack.
• Assess and coordinate response to vulnerabilities in AI features and components shipped in Omnissa products (for example prompt injection, model and agent integrations, and AI supply chain dependencies).
• Define metrics for AI-assisted operations: time to triage, time to remediate, false positive rate, and report quality.

3. Program and process

• Build and maintain process, policy, and runbook documentation; identify and implement team improvements.
• Define and report program roadmap, status, and success metrics (SLAs, backlog, aging, disclosure timelines).
• Support regulatory and customer obligations tied to vulnerability handling and disclosure (for example EU Cyber Resilience Act reporting, CNA responsibilities, customer and audit inquiries).
• Answer customer and field "am I impacted by CVE X" inquiries using SBOM, scanner, and threat intelligence data.
• Monitor threat intelligence, exploit activity, and KEV-class signals to maintain situational awareness and drive prioritization.
• Engage the security community: researchers, bug bounty participants, vendors, and conferences.
• Work with stakeholders from engineering to executive level.

Preferred Skills

• Prior software engineering or architecture experience, including secure coding practices.
• Scripting or automation skills (Python, APIs, Jira/Confluence automation) to build workflows.
• Experience with SAST, SCA, and vulnerability scanners, and code platforms (GitHub, GitLab, Bitbucket).
• Experience with bug bounty or vulnerability disclosure programs.
• Customer-facing experience.
• Experience with Jira Service Management and Confluence.
• Relevant certifications (for example FIRST PSIRT Services Framework training, GCIH, GCFA, CISSP) are a plus.