Principal Engineer, Product Security

Analog Devices; Munster; On-site; EUR 120,000 - 180,000; Full time

Job summary

Analog Devices is seeking a Principal Engineer, Product Security to drive product security across the full lifecycle from definition to post-release support. You will coordinate with the Product Security Assurance team and security architects to ensure robust security decisions, evidence, and compliance across digital, mixed-signal chips, modules and software.

The role emphasizes leadership, cross-functional collaboration, and alignment with customer expectations and standards, including Secure

Qualifications

• Completion of security training or certification.
• Approximately 10 years of experience securing development processes and product security practices.
• Working knowledge of relevant standards and regulatory frameworks (IEC62443, ISO21434, US FDA, EU CRA).
• Strong understanding of security requirements at product level: hardware SoC, Secure Boot, hardware cryptography, embedded software security; 3+ years in silicon SoC security preferred.
• Solid technical background spanning software, hardware, network and cloud security for embedded/connected products.
• Ability to collaborate effectively across product, architecture, software, hardware, quality and assurance teams.

Responsibilities

• Own the product security workstream and serve as the primary security lead across the product lifecycle.
• Define and maintain the product security posture, requirements, and assumptions.
• Ensure evidence demonstrates security assurance practices during development.
• Act as main contact with Product Security Assurance team and Security Advisor for development questions.
• Shape security requirements, architecture decisions, threat analysis inputs, and security IP selection.
• Align security decisions with product owner, architect, software and engineering teams.
• Engage key customers to validate security objectives and posture.
• Drive compliance planning and delivery for standards, regulations, certifications and SDLC deliverables.
• Oversee security implementation, secure development practices, verification activities and post-release security continuity.
• Post-release incident response actions and remediation, maintenance obligations, and end-of-life security.

Skills

Security training

Secure development

Product security

Security assurance

Cross-functional teamwork

Job description

About Analog Devices

Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X.

Principal Engineer, Product Security

Analog Devices is seeking a Principal Engineer, Product Security Champion to drive product security through the full product lifecycle, from early definition through release and post-release support. This role sits inside the core security enablement team and owns day-to-day product security leadership for programs. The Security Champion serves as the central point of accountability for product security decisions, ensures the required security assurance evidence is created, works with the Product Security Assurance team and the assigned security architect, and acts as the product contact for post-release security incident response activities. The role also helps align product security goals with customer expectations, applicable standards, implementation feasibility, and long-term product support needs in alignment with the program owner.

Essential Duties And Responsibilities

• Own the product security workstream for the program and serve as the primary point of accountability for security across the product lifecycle. Products in scope are: digital and mixed signal chips, modules, subsystems and software.


• Define and maintain the product security posture, including product-level security requirements, objectives, and supporting assumptions.


• Ensure the evidence is created to demonstrate that security assurance practices are followed during development.


• Act as the main point of contact with the Product Security Assurance team and the assigned Security Advisor for development-phase security questions and assurance activities.


• Shape security requirements, architecture decisions, threat analysis inputs, and security IP selection.


• Align with the product owner, product architect, software teams, and engineering stakeholders so security decisions fit the product scope, architecture, cost, schedule, and intended use.


• Engage key customers when needed to validate security objectives, threat assumptions, and expected security posture for the target application.


• Drive compliance planning and execution for applicable standards, regulations, certifications, and Secure Development Life Cycle deliverables.


• Oversee security implementation, secure development practices, verification activities, provisioning-related security actions, and product security continuity after release.


• Act as the product point of contact for post-release security incident response activities and organize response actions when vulnerabilities or incidents arise.


• Maintain continuity of security through product lifetime, including support for remediation, maintenance obligations, and end-of-life security activities.

Minimum Qualifications

• Completion of security training or certification


• Demonstrated ~10 year experience to secure development processes, product security implementation, and security assurance practices in product programs following established standards.


• Working knowledge of relevant standards, regulatory frameworks, and industry security practices applicable to the target market (e.g. IEC62443, ISO21434, US FDA, EU CRA).


• Strong understanding of security requirements and how they apply at the product level: hardware System-on-Chip architectures, Secure Boot, Hardware cryptography, Embedded Software security. 3+ years of experience in silicon SoC security architecture and design preferred.


• Solid technical background spanning software, hardware, network and cloud security attached to embedded or connected products.


• Ability to work effectively across product, architecture, software, hardware, quality, and assurance teams.

Additional Skills, Knowledge And Abilities

• Ability to explain security decisions clearly and build trust with internal stakeholders and customers.


• Ability to translate market, customer, and regulatory inputs into actionable product security requirements and plans.


• Ability to manage long-lived security ownership, including compliance evidence, certifications, and post-release maintenance expectations or products.


• Comfort operating in cross-functional product teams where security cuts across architecture, implementation, verification, manufacturing, and operational support.

For positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S. Department of Commerce - Bureau of Industry and Security and/or the U.S. Department of State - Directorate of Defense Trade Controls. As such, applicants for this position – except US Citizens, US Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) – may have to go through an export licensing review process.

Analog Devices is an equal opportunity employer. We foster a culture where everyone has an opportunity to succeed regardless of their race, color, religion, age, ancestry, national origin, social or ethnic origin, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, parental status, disability, medical condition, genetic information, military or veteran status, union membership, and political affiliation, or any other legally protected group.

Job Req Type: Experienced

Required Travel: Yes, 10% of the time

Shift Type: 1st Shift/Days