Cybersecurity Analyst - Semiconductor IP

Job Title

Cybersecurity Analyst - Semiconductor IP

Role Summary

Lead threat analysis and security integration for semiconductor IP and related firmware. Work with product, design, verification, and cybersecurity architecture teams to embed security across the product lifecycle and produce customer-facing integration guidance.

Assigned to IP product teams, you will deliver actionable analysis, verification objectives, and evidence that product teams and customers can follow without re-deriving the work.

Experience Level

Mid-level. Typically requires 4 or more years of relevant experience in product cybersecurity, embedded security, digital design, or digital verification; demonstrated capability can offset fewer years.

Responsibilities

Provide threat analysis, requirements guidance, and verifiable evidence as part of the cybersecurity lifecycle for IP products.

• Lead threat modeling and threat analysis for semiconductor IP and firmware; identify assets, attack surfaces, attack paths, and recommend in-product or integrator controls.
• Perform security analysis across planning, design, implementation, verification, and release.
• Advise product teams on cybersecurity requirements, architecture, and verification; integrate security work into existing development flows.
• Author customer-facing integration guidance describing threats, controls, and integration steps.
• Review RTL, architecture, and verification intent against secure-design principles and assess whether controls are implemented and testable.
• Support in-field activities including vulnerability assessment, incident analysis, and security advisories.
• Facilitate cross-team working sessions to keep analysis consistent across IP classes.
• Deliver analysis incrementally within agile sprints and keep evidence current as designs change.
• Automate analysis, data transformation, and report generation using Python and agentic workflows while retaining human ownership of conclusions.
• Use Jira, Confluence, Git, and GitLab to track analysis, documentation, and versioned deliverables.

Requirements

Must-have skills and capabilities for the role; nice-to-have items are listed separately.

• Must-have: Practical experience performing threat modeling or threat analysis and risk assessment on real products.
• Must-have: Ability to identify assets, attackers, attack surfaces, attack paths, and map each path to mitigations (in-product control or integration requirement).
• Must-have: Experience applying a cybersecurity lifecycle across planning, requirements, design, implementation, verification, and release.
• Must-have: Hands-on understanding of embedded systems (SoC/MCU integration, firmware, hardware/software interfaces, registers, boot/debug, on-chip interconnects).
• Must-have: Ability to read and discuss RTL (Verilog, SystemVerilog, or VHDL), architecture documents, interfaces, and register maps with designers and verification leads.
• Must-have: Hands-on proficiency as a digital designer or digital verification engineer (either path is sufficient).
• Must-have: Ability to translate threat-analysis results into requirements, design guidance, verification objectives, and release evidence.
• Must-have: Proficiency writing and maintaining Python scripts for analysis and automation (readable and usable by other analysts).
• Must-have: Practical experience using AI agents/agentic workflows to speed research and drafting while retaining human ownership of technical conclusions.
• Must-have: Practical use of Jira, Confluence, Git, and GitLab for tickets, documentation, and code/review workflows; clear written and spoken English.
• Nice-to-have: Working knowledge of ISO/SAE 21434 or comparable product-cybersecurity standards, analog or mixed-signal background, semiconductor IP product experience, vulnerability handling, or applied embedded cryptography.

Education Requirements

Bachelor's degree in electrical engineering, computer engineering, computer science, or a related field, or equivalent practical experience. Advanced degree is welcome but not required. The posting explicitly allows equivalent practical experience in lieu of a degree.

About the Company

Company: Synopsys

Headquarters: Mountain View, California, USA

Synopsys is a leading company in electronic design automation (EDA) and semiconductor IP solutions. It provides tools and services for designing and verifying complex semiconductor devices and systems. The company plays a pivotal role in the semiconductor industry, helping engineers innovate and deliver higher-quality products faster. Synopsys is committed to advancing technology standards and offers a range of software and hardware solutions to its clients globally.