Principal Engineer, Product Security

Job Title

Principal Engineer, Product Security

Role Summary

Lead product-level security for digital and mixed-signal chips, modules, subsystems and associated software across the full product lifecycle. Serve as the product security champion within the security enablement team, owning security decisions, assurance evidence, and post-release incident response for assigned programs.

Experience Level

Senior — expects approximately 10+ years of demonstrated experience securing development processes and implementing product security and assurance practices.

Responsibilities

Accountable for product security across design, development, release, and post-release support. Typical responsibilities include:

• Own the product security workstream and act as primary point of accountability for security on the program.
• Define and maintain product-level security posture, requirements, objectives, and assumptions.
• Ensure creation and retention of security assurance evidence during development.
• Coordinate with Product Security Assurance and assigned Security Advisor on assurance activities and development-phase security questions.
• Inform security requirements, architecture decisions, threat analysis, and security IP selection.
• Align security decisions with product scope, architecture, cost, schedule, and intended use; engage product owners and engineers as needed.
• Drive compliance planning and execution for applicable standards, regulations, certifications, and SDLC deliverables.
• Oversee secure implementation, verification activities, provisioning-related tasks, and long-term product security continuity.
• Serve as product contact for post-release vulnerability and incident response and organize remediation actions.
• Travel as required (approximately 10% of the time).

Requirements

Must-have skills and experience to perform the role effectively; preferred items noted separately.

• Working knowledge of relevant standards, regulatory frameworks, and industry practices (examples: IEC 62443, ISO 21434, US FDA, EU CRA).
• Strong understanding of product-level security for hardware and software: Secure Boot, hardware cryptography, embedded software security, and SoC-related considerations.
• Solid technical background spanning software, hardware, network, and cloud security for embedded or connected products.
• Experience with secure development lifecycle practices, verification activities, and creating assurance evidence.
• Ability to work effectively across product, architecture, software, hardware, quality, and assurance teams and to communicate security decisions clearly to technical and non-technical stakeholders.
• Ability to manage long-term security ownership including compliance evidence, certifications, and post-release maintenance.
• Preferred: experience in threat analysis, security architecture trade-offs, and interacting with key customers on security expectations.
• Preferred: familiarity with silicon/SoC security architecture and design (3+ years preferred).

Education Requirements

Completion of security training or certification is required. The role expects approximately 10 years of demonstrated experience securing development processes and product security assurance practices; 3+ years of silicon/SoC security architecture experience is preferred. Equivalent practical experience will be considered.

About the Company

Company: Analog Devices

Headquarters: Norwood, Massachusetts, USA

Analog Devices is a leading global semiconductor company that bridges the physical and digital worlds, enabling breakthroughs at the Intelligent Edge. With a focus on innovation, ADI develops solutions that drive advancements in digitized factories, mobility, and digital healthcare. The company employs around 24,000 people globally and reported revenues exceeding $9 billion in FY24, creating technologies that transform lives across various sectors.