Principal Engineer, Product Security

Job Title

Principal Engineer, Product Security

Role Summary

Lead product security for assigned programs across the full product lifecycle, from early definition through release and post-release support. Embedded in the core security enablement team, this role provides day-to-day security leadership, coordinates assurance evidence and compliance activities, and serves as the product contact for post-release incident response.

Works with product owners, architects, software and hardware teams, and customers to align security goals with product scope, architecture, cost, schedule, and regulatory requirements.

Experience Level

Senior - principal-level role. Candidate should have approximately 10 years of relevant experience securing development processes, product security implementation, and assurance practices.

Responsibilities

The principal responsibilities include:

• Own the product security workstream for the program and act as the primary security accountability point for products (digital and mixed-signal chips, modules, subsystems, and software).
• Define and maintain product security posture, including product-level requirements, objectives, and assumptions.
• Ensure creation and retention of evidence that security assurance practices were followed during development.
• Serve as main contact for Product Security Assurance and assigned Security Advisor during development and assurance activities.
• Influence security requirements, architecture decisions, threat analysis inputs, and security IP selection.
• Coordinate with product owner, architects, software, hardware, quality, and assurance teams so security decisions fit scope, cost, and schedule.
• Engage customers to validate security objectives, threat assumptions, and expected product security posture when needed.
• Plan and execute compliance activities for applicable standards, regulations, certifications, and SDLC deliverables.
• Oversee secure implementation, verification activities, provisioning-related security actions, and continuity of security after release.
• Act as product contact for post-release security incident response and organize remediation actions.
• Maintain security through product lifetime, including remediation support, maintenance obligations, and end-of-life activities.

Requirements

Key qualifications and skills. Items marked as preferred are nice-to-have.

• Must-have: ~10 years of experience implementing secure development processes, product security, and security assurance practices in product programs.
• Must-have: Working knowledge of relevant standards and regulatory frameworks applicable to embedded/connected products (examples: IEC 62443, ISO 21434, US FDA, EU CRA).
• Must-have: Strong understanding of product-level security requirements across hardware (SoC architectures, Secure Boot, hardware cryptography) and embedded software security.
• Must-have: Solid technical background spanning software, hardware, network, and cloud security as they relate to embedded or connected products.
• Must-have: Ability to work effectively across product, architecture, software, hardware, quality, and assurance teams and to communicate security decisions clearly.
• Must-have: Ability to manage long-term security ownership including compliance evidence, certifications, and post-release maintenance.
• Preferred: 3+ years of experience in silicon SoC security architecture and design.
• Other: Required travel approximately 10% of the time.

Education Requirements

Completion of security training or a security certification is required. No specific academic degree or field of study is specified in the posting.

About the Company

Company: Analog Devices

Headquarters: Norwood, Massachusetts, USA

Analog Devices is a leading global semiconductor company that bridges the physical and digital worlds, enabling breakthroughs at the Intelligent Edge. With a focus on innovation, ADI develops solutions that drive advancements in digitized factories, mobility, and digital healthcare. The company employs around 24,000 people globally and reported revenues exceeding $9 billion in FY24, creating technologies that transform lives across various sectors.