Flock Safety

1 month ago

Staff Security Engineer, PSIRT

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Lead Flock's Security Incident Response Team (PSIRT) as the single point of accountability for all externally-reported and internally-discovered vulnerabilities. Own CNA/CVD programs, drive fixes across hardware, firmware, cloud, mobile, ML, and legal/comms, and set SLAs, playbooks, and public security advisories to reduce product risk.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Stand up and run PSIRT as the single point of accountability for externally-reported and internally-discovered vulnerabilities touching a Flock product.
•Own the CNA and the Coordinated Vulnerability Disclosure program, driving fixes to closure across hardware, firmware, device SRE, cloud SRE, mobile, ML, legal, communications, and customer support.
•Lead by influence across engineering, legal, communications, and support; set SLAs, metrics, playbooks, and public security advisories the company executes against.
•Partner with Detection & Response and Corporate Security to ensure PSIRT is product-focused and risk-reducing for devices in the field and customer deployments.
•Manage response operations against established SLAs, track metrics (time-to-triage, time-to-fix, time-to-disclose), and deliver regular performance updates to leadership.

Pay and Benefits

Salary: USD 185,000 - 230,000 annually

Equity and Bonus:Equity

Perks:Remote WorkHealth InsuranceParental LeaveHome OfficeEquity

Key Requirements

•7+ years in security engineering with at least 4 years directly running or leading a PSIRT, product security, or coordinated vulnerability disclosure function; experience at a company that ships connected hardware is highly preferred.
•Demonstrated end-to-end ownership of PSIRT services, including stakeholder ecosystem, discovery, triage, remediation, and disclosure.
•Hands-on experience as a CVE Numbering Authority (CNA) or leading onboarding of one; deep knowledge of CNA rules, CVE scope, and root coordination with bodies like CISA ICS-CERT/MITRE.
•Deep familiarity with ISO/IEC 29147, ISO/IEC 30111, CERT/CC Guide to CVD, and CISA Binding Directive 20-01.
•Strong product security expertise across at least three areas (Embedded/Firmware Security, Linux/Android Device Security, AWS Cloud Security, Mobile/Web App Security, ML/CV Model Security) and ability to defend severity decisions using CVSS/EPSS/SSVC.

Experience:7+ yearsSecurityHardwareEmbeddedCNAPSIRTCVDISO 29147ISO 30111OWASPCWECVSS

Skills:WritingCommunicationLeadershipInfluenceCollaboration

Tech Stack:CNACVSSCWEISO/IEC 29147ISO/IEC 30111AWSLinuxAndroidOWASPGraphQLMJ/ML security

Company Brief

Flock Safety

Builds automated license-plate recognition cameras, AI video, gunshot-detection and drone systems plus investigative software to help law enforcement, cities, businesses and neighborhoods prevent and solve crime.

Industry: Surveillance & Security Hardware

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Atlanta, United States

Founded: 2017

Glassdoor: 3.5

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Flock Safety

1 month ago

Staff Security Engineer, PSIRT

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Stand up and run PSIRT as the single point of accountability for externally-reported and internally-discovered vulnerabilities touching a Flock product.
•Own the CNA and the Coordinated Vulnerability Disclosure program, driving fixes to closure across hardware, firmware, device SRE, cloud SRE, mobile, ML, legal, communications, and customer support.
•Lead by influence across engineering, legal, communications, and support; set SLAs, metrics, playbooks, and public security advisories the company executes against.
•Partner with Detection & Response and Corporate Security to ensure PSIRT is product-focused and risk-reducing for devices in the field and customer deployments.
•Manage response operations against established SLAs, track metrics (time-to-triage, time-to-fix, time-to-disclose), and deliver regular performance updates to leadership.

Pay and Benefits

Salary: USD 185,000 - 230,000 annually

Equity and Bonus:Equity

Perks:Remote WorkHealth InsuranceParental LeaveHome OfficeEquity

Key Requirements

•7+ years in security engineering with at least 4 years directly running or leading a PSIRT, product security, or coordinated vulnerability disclosure function; experience at a company that ships connected hardware is highly preferred.
•Demonstrated end-to-end ownership of PSIRT services, including stakeholder ecosystem, discovery, triage, remediation, and disclosure.
•Hands-on experience as a CVE Numbering Authority (CNA) or leading onboarding of one; deep knowledge of CNA rules, CVE scope, and root coordination with bodies like CISA ICS-CERT/MITRE.
•Deep familiarity with ISO/IEC 29147, ISO/IEC 30111, CERT/CC Guide to CVD, and CISA Binding Directive 20-01.
•Strong product security expertise across at least three areas (Embedded/Firmware Security, Linux/Android Device Security, AWS Cloud Security, Mobile/Web App Security, ML/CV Model Security) and ability to defend severity decisions using CVSS/EPSS/SSVC.

Experience:7+ yearsSecurityHardwareEmbeddedCNAPSIRTCVDISO 29147ISO 30111OWASPCWECVSS

Skills:WritingCommunicationLeadershipInfluenceCollaboration

Tech Stack:CNACVSSCWEISO/IEC 29147ISO/IEC 30111AWSLinuxAndroidOWASPGraphQLMJ/ML security

Company Brief

Flock Safety

Industry: Surveillance & Security Hardware

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Atlanta, United States

Founded: 2017

Glassdoor: 3.5

Website LinkedIn Glassdoor