Technical Program Manager, Security (Coordinated Vulnerability Disclosure)

When to Use

• Stand up or improve CVD / responsible disclosure policy and operating model
• Run intake triage queue (email, portal, bounty platform) with SLAs
• Coordinate researcher communication, extensions, and safe harbor questions
• Track remediation milestones across product and platform teams
• Manage embargo, coordinated disclosure date, and publication checklist
• Operate bug bounty scope, rewards, and platform workflows
• Produce program status, RAID, and steering updates for security leadership
• Plan advisory/CVE release with legal and communications

When NOT to Use