Read and interpret CVEs and ICS advisories from sources such as CISA ICS-CERT, vendor PSIRTs and Mandiant threat intelligence. Turn the technical findings into clear, actionable guidance for operational teams. Judge real-world exploitability in an OT context by looking at network exposure, the access an attacker would need, and device mode or state. Check advisories against the OT asset inventory to find affected devices, models and firmware versions, so remediation targets the right assets.
Plan, track and report on cross-functional remediation programs in a project management tool such as Task Flow. Keep milestones, dependencies, blockers and SLO performance visible. Write and maintain Standard Operating Procedures (SOPs). Run triage decisions on critical vulnerabilities and send qualified findings to the right engineering, operations or vendor teams.
Job description provided by Google.
View the original posting
