Principal Engineer, Product Security

Job Title

Principal Engineer, Product Security

Role Summary

Lead product security for one or more product programs across the full lifecycle, from early definition through release and post-release support. The role sits in the security enablement team and provides day-to-day security leadership, drives assurance evidence, and coordinates with product owners, architects, and security assurance teams.

Experience Level

Senior — approximately 10 years of relevant product security experience is expected; demonstrated leadership in securing product programs.

Responsibilities

Accountable for product security decisions, assurance, and continuity across development and post-release activities. Key responsibilities include:

• Own the product security workstream and serve as the primary security contact for the program (chips, modules, subsystems, and software).
• Define and maintain product-level security posture, requirements, objectives, and assumptions.
• Ensure creation and retention of security assurance evidence and SDLC deliverables.
• Coordinate with Product Security Assurance and assigned Security Advisor during development.
• Influence security requirements, architecture decisions, threat analysis inputs, and security IP selection.
• Align security decisions with product scope, architecture, cost, schedule, and intended use; engage customers when needed.
• Plan and execute compliance for applicable standards, regulations, and certifications.
• Oversee secure implementation, verification, provisioning, and post-release incident response and remediation.
• Maintain product security continuity through maintenance and end-of-life activities.

Requirements

Must-have technical skills, domain knowledge, and behaviors required to perform the role.

• Demonstrated ~10 years' experience securing development processes, implementing product security, and executing assurance practices in product programs.
• Working knowledge of relevant standards, regulatory frameworks, and industry practices (examples given in source: IEC 62443, ISO 21434, US FDA, EU CRA).
• Strong understanding of product-level security requirements across hardware (SoC architectures), Secure Boot, hardware cryptography, and embedded software security.
• Solid technical background across software, hardware, network, and cloud security as they relate to embedded or connected products.
• Ability to work effectively across product, architecture, software, hardware, quality, and assurance teams and to explain security decisions clearly.
• Willingness to travel — approximately 10% of the time.

Nice-to-have:

• 3+ years' experience in silicon SoC security architecture and design.
• Experience engaging customers on security objectives and threat assumptions.

Education Requirements

Completion of security training or industry certification is required. No specific degree or field of study is specified in the posting.

About the Company

Company: Analog Devices

Headquarters: Norwood, Massachusetts, USA

Analog Devices is a leading global semiconductor company that bridges the physical and digital worlds, enabling breakthroughs at the Intelligent Edge. With a focus on innovation, ADI develops solutions that drive advancements in digitized factories, mobility, and digital healthcare. The company employs around 24,000 people globally and reported revenues exceeding $9 billion in FY24, creating technologies that transform lives across various sectors.