Senior Product Security Engineer - PSIRT & Standards

Microchip Technology Inc.; Chandler (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

Microchip Technology Inc. is seeking a Product Security Engineer to join the Product Security Office (PSO). You will triage vulnerabilities across hardware, firmware, and software, perform CVSS-based assessments, and coordinate remediation with engineering teams.

You will also align product security with regulatory standards, collaborate with researchers, and author advisories. A strong background in embedded security and secure development is required.

Qualifications

• Bachelors degree in Electrical Engineering, Computer Engineering, Electrical and Computer Engineering, Computer Science, Embedded Systems, Cybersecurity, or closely related field.
• 7.5+ years of experience in firmware/embedded software development, product security engineering, or vulnerability management.
• Experience in PSIRT, Security Operations, or security incident response team environment.
• Familiarity with CVSS scoring, secure development practices, and standards-based security.

Responsibilities

• Manage day-to-day intake, triage, and case management of product vulnerability reports across hardware, firmware, and software products.
• Perform technical vulnerability assessments and apply structured CVSS scoring to determine impact and exploitability.
• Support remediation coordination with engineering teams and security champions.
• Collaborate with external researchers and coordination centers on vulnerability submissions and disclosure.
• Author security advisories and customer communications in CSAF format and coordinate with upstream vendors.
• Execute CVE assignment and support CNA operations under Microchip's CVE program.
• Monitor SBOM/VEX feeds to identify issues affecting Microchip products.
• Define and maintain CRA readiness frameworks and regulatory mapping within development workflows.
• Draft responses to customer security questionnaires and CRA requests.

Skills

PSIRT operations

Embedded software

Cryptography

Hardware security

Secure SDLC

Vulnerability assessment

Technical documentation

Cross-functional collaboration

Independent ownership

CVSS scoring

Education

Bachelor's degree in Electrical Engineering / Computer Engineering / Electrical and Computer Engineering / Computer Science / Embedded Systems / Cybersecurity

Job description

Microchip Technology Inc. is seeking a Product Security Engineer to join the Product Security Office (PSO). You will triage vulnerabilities across hardware, firmware, and software, perform CVSS-based assessments, and coordinate remediation with engineering teams.

You will also align product security with regulatory standards, collaborate with researchers, and author advisories. A strong background in embedded security and secure development is required.