Product Security Incident Response Engineer

Analog Devices; Limerick; On-site; EUR 75,000 - 110,000; Full time

Job summary

Analog Devices, Inc. seeks a Product Security Incident Response Engineer to join our team in Limerick, Ireland or Edinburgh, Scotland. You will identify security vulnerabilities in products and work with product teams to ensure timely remediation within the PSIRT framework.

Role requires 3+ years in incident response, strong security fundamentals, and the ability to communicate with researchers and stakeholders. Travel ~10% may be required; Bachelor's degree is required.

Qualifications

• 3+ years demonstrable proficiency with incident response responsibilities in one or more areas: IOT, hardware, web apps, or software apps.
• Prior development experience in software/web/silicon/IoT is a plus.
• Security certifications (or ability to obtain within 6 months): CEH, CISSP, GIAC, GCIH, GCIA.

Responsibilities

• Coordinate product incident response activities across multiple product lines with focus on software.
• Identify, triage, develop, and test remediations following the PSIRT process.
• Assist with security assessments during development to comply with standards.
• Communicate findings and remediations clearly with researchers and internal teams.

Skills

Incident response

Security fundamentals

Communication

Process improvement

Stakeholder management

Education

Bachelor's Degree

Job description

About Analog Devices Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X.

Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X.

Product Security Incident Response Engineer

Analog Devices, Inc. is looking for a Product Security Incident Response Engineer to join our team in Limerick, Ireland or Edinburgh, Scotland offices.

As a Product Security Incident Response Engineer, you will be responsible for identifying security vulnerabilities in products and working with individual product teams to ensure the vulnerability is corrected in a cost-effective manner.

Essential Duties & Responsibilities

• Coordinate product incident response activities, from external and internal finders, across multiple product lines within the ADI product catalog with a strong focus on software.
• 3+ years demonstrable proficiency with incident response responsibilities in one or more of the following areas:
• Internet of Things (IOT), hardware, web applications, and/or software applications.
• Partner with product engineering teams to identify, triage, develop, and test remediations while following the PSIRT process.
• Assist with Security Assessments of various products during their development to comply with industry standards and best practices.
• Communicate effectively and professionally with external and internal finders, such as security researchers initiating contact with ADI about potential vulnerabilities.

The successful candidate will be able to:

• Learn new technologies, products, and tooling to effectively apply the PSIRT process.
• Have a mindset focused on process improvement both for the PSIRT process and ADI’s lifecycle development process.
• Communicate clearly and professionally with stakeholders and leadership regarding vulnerability findings and remediations.
• Demonstrate a strong understanding of security fundamentals.

Preferred Qualifications

• Prior development experience in one or more of the following areas:
• Software development, web development, silicon development, or IoT development
• Security certifications (or able to obtain within 6 months):
• CEH, CISSP, GIAC, GCIH, GCIA

Education Level: Bachelor's Degree

Travel Required: Yes, 10% of the Time

For positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S. Department of Commerce - Bureau of Industry and Security and/or the U.S. Department of State - Directorate of Defense Trade Controls. As such, applicants for this position - except US Citizens, US Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) - may have to go through an export licensing review process.

Analog Devices is an equal opportunity employer. We foster a culture where everyone has an opportunity to succeed regardless of their race, color, religion, age, ancestry, national origin, social or ethnic origin, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, parental status, disability, medical condition, genetic information, military or veteran status, union membership, and political affiliation, or any other legally protected group.

Job Req Type: Experienced

Required Travel: Yes, 10% of the time

Shift Type: 1st Shift/Days