Product Security Incident Response Engineer

Analog Devices; City of Edinburgh; On-site; GBP 75,000 - 105,000; Full time

Job summary

Analog Devices, Inc. in the UK and Ireland seeks a Product Security Incident Response Engineer to join our team in Edinburgh or Limerick. You will identify vulnerabilities in products and coordinate remediation with product teams to fix issues cost-effectively.

As a PSIRT-focused role, you will work across product lines with emphasis on software, triage incidents, and drive remediation while engaging security researchers and stakeholders to improve lifecycle security.

Qualifications

• 3+ years of incident response experience in IoT, hardware, web or software applications.
• Experience with PSIRT processes and remediation testing.
• Security certifications (e.g., CEH, CISSP, GIAC) preferred or obtainable within 6 months.

Responsibilities

• Coordinate product incident response activities across multiple product lines with a focus on software.
• Partner with engineering teams to identify, triage, remediate, and test mitigations.
• Assist with security assessments during development to meet standards and best practices.
• Communicate findings and remediations clearly with researchers and internal stakeholders.

Skills

Incident response

Security fundamentals

Stakeholder communication

Learning agility

Education

Bachelor's Degree

Job description

About Analog Devices Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X.

Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X.

Product Security Incident Response Engineer

Analog Devices, Inc. is looking for a Product Security Incident Response Engineer to join our team in Limerick, Ireland or Edinburgh, Scotland offices.

As a Product Security Incident Response Engineer, you will be responsible for identifying security vulnerabilities in products and working with individual product teams to ensure the vulnerability is corrected in a cost-effective manner.

Essential Duties & Responsibilities

• Coordinate product incident response activities, from external and internal finders, across multiple product lines within the ADI product catalog with a strong focus on software.
• 3+ years demonstrable proficiency with incident response responsibilities in one or more of the following areas:
• Internet of Things (IOT), hardware, web applications, and/or software applications.
• Partner with product engineering teams to identify, triage, develop, and test remediations while following the PSIRT process.
• Assist with Security Assessments of various products during their development to comply with industry standards and best practices.
• Communicate effectively and professionally with external and internal finders, such as security researchers initiating contact with ADI about potential vulnerabilities.

The successful candidate will be able to:

• Learn new technologies, products, and tooling to effectively apply the PSIRT process.
• Have a mindset focused on process improvement both for the PSIRT process and ADI’s lifecycle development process.
• Communicate clearly and professionally with stakeholders and leadership regarding vulnerability findings and remediations.
• Demonstrate a strong understanding of security fundamentals.

Preferred Qualifications

• Prior development experience in one or more of the following areas:
• Software development, web development, silicon development, or IoT development
• Security certifications (or able to obtain within 6 months):
• CEH, CISSP, GIAC, GCIH, GCIA

Education Level: Bachelor's Degree

Travel Required: Yes, 10% of the Time

For positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S. Department of Commerce - Bureau of Industry and Security and/or the U.S. Department of State - Directorate of Defense Trade Controls. As such, applicants for this position - except US Citizens, US Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) - may have to go through an export licensing review process.

Analog Devices is an equal opportunity employer. We foster a culture where everyone has an opportunity to succeed regardless of their race, color, religion, age, ancestry, national origin, social or ethnic origin, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, parental status, disability, medical condition, genetic information, military or veteran status, union membership, and political affiliation, or any other legally protected group.

Job Req Type: Experienced

Required Travel: Yes, 10% of the time

Shift Type: 1st Shift/Days