Manager, Product Cybersecurity - Semiconductor IP

Job Title

Manager, Product Cybersecurity - Semiconductor IP

Role Summary

Lead a team of cybersecurity analysts who provide threat analysis, requirements, and integration guidance for Synopsys semiconductor IP products. The role partners with product, architecture, design, verification, and firmware teams to embed security into the IP development lifecycle and to produce customer-facing integration guidance.

The team’s work spans planning, design, verification, release, and in-field response; the manager sets priorities, ensures quality and consistency, and develops analysts’ capabilities.

Experience Level

Senior - requires ten or more years in product cybersecurity, embedded security, digital design, digital verification, or a closely related engineering role, including at least four years leading people or technical teams. Stronger demonstrated capabilities can offset exact years.

Responsibilities

Manage the team’s delivery of actionable cybersecurity analysis and guidance across the IP lifecycle; ensure consistency, quality, and traceability of findings.

• Lead and prioritize work for cybersecurity analysts assigned to IP product teams; balance capacity across the portfolio and manage sprint alignment.
• Define and direct threat analysis for IP and firmware: identify assets, access points, threat scenarios, attack paths, and appropriate mitigations or integrator requirements.
• Drive security analysis through planning, design, implementation, verification, and release; translate analysis into requirements, verification objectives, and release evidence.
• Review and approve analysts’ deliverables for technical correctness, clear assumptions, and consistent risk language before delivery to product teams or customers.
• Advise product leaders and architects on cybersecurity requirements, architecture, and verification to integrate security into existing development flows.
• Oversee customer-facing integration guidance and in-field activities (vulnerability assessment, incident analysis, advisories) in coordination with vulnerability response and architects.
• Coach, give feedback, set goals, and plan career growth for analysts; recruit and grow team capability.
• Promote automation and reproducible workflows (Python, agentic workflows) while maintaining analyst ownership of technical conclusions.
• Maintain work tracking and documentation using Jira, Confluence, Git, and GitLab (or equivalent).

Requirements

Required technical and leadership capabilities to perform and oversee product-level threat analysis and to convert findings into engineering work and customer guidance.

• Must-have: Ten or more years in product cybersecurity, embedded security, digital design, digital verification, or a closely related role, with four or more years leading people or technical teams (experience can be traded for demonstrated capability).
• Must-have: Practical experience performing or reviewing threat modeling, threat analysis, and risk assessment on real products and mapping attack paths to mitigations or integrator requirements.
• Must-have: Ability to convert threat-analysis results into requirements, design guidance, verification objectives, and release evidence; familiarity with applying a cybersecurity lifecycle across planning, design, verification, and release.
• Must-have: Hands-on understanding of embedded systems (SoC/MCU integration, firmware, HW/SW interfaces, registers, boot/debug, on-chip interconnects) and the ability to read and discuss RTL (Verilog/SystemVerilog/VHDL) and architecture with designers and verification leads.
• Must-have: Experience delivering work inside agile product teams and re-scoping security work as product content changes.
• Must-have: Practical ability to read and review Python used for analysis and automation; experience using AI agents and agentic workflows while keeping humans accountable for conclusions.
• Must-have: Hands-on use of Jira, Confluence, Git, and GitLab (or equivalent) for tracking, documentation, and review; strong written and spoken English for technical leadership across distributed teams.
• Nice-to-have: Familiarity with digital verification languages and methods (SystemVerilog, UVM, SystemC), ISO/SAE 21434 or comparable product-cybersecurity standards, analog/mixed-signal background, semiconductor IP product experience, vulnerability handling, or applied embedded cryptography.

Education Requirements

Bachelor’s degree in electrical engineering, computer engineering, computer science, or a related field, or equivalent practical experience. An advanced degree is welcome but not required.

About the Company

Company: Synopsys

Headquarters: Mountain View, California, USA

Synopsys is a leading company in electronic design automation (EDA) and semiconductor IP solutions. It provides tools and services for designing and verifying complex semiconductor devices and systems. The company plays a pivotal role in the semiconductor industry, helping engineers innovate and deliver higher-quality products faster. Synopsys is committed to advancing technology standards and offers a range of software and hardware solutions to its clients globally.