Principal Engineer, Product Security

About Analog Devices

Analog Devices, Inc. (NASDAQ: ADI) is a leading global semiconductor company that merges analog, digital, AI, and software technologies to empower breakthroughs at the Intelligent Edge. With over $11 billion in FY25 revenue, ADI drives innovations across sectors like automation, robotics, healthcare, energy, and data centers, enabling advanced solutions to address climate change and connectivity challenges.

Role Overview

The Principal Engineer, Product Security champion position within the core security enablement team demands leadership for product security throughout the full lifecycle—from initial definition to release and ongoing support. This role centralizes accountability for security decisions, collaborates with security assurance teams and architects, and manages post-release security incident responses. It aligns product security objectives with regulatory standards, customer requirements, and practical implementation considerations.

Key Responsibilities

• Lead the product security workstream, acting as primary security authority across product lifecycle for digital and mixed signal chips, modules, subsystems, and software.
• Establish and uphold product security posture, including defining security requirements, objectives, and underlying assumptions.
• Ensure documentation evidencing compliance with security assurance practices during development is produced.
• Serve as main liaison with Product Security Assurance and Security Advisors to address security queries and assurance efforts during development.
• Influence security requirements, architecture choices, threat analysis inputs, and security IP selection.
• Coordinate with product owners, architects, software and engineering teams to ensure security aligns with product scope, architecture, cost, and schedule.
• Engage customers when necessary to confirm security goals, threat models, and expected security postures.
• Oversee planning and adherence to relevant standards, regulations, certifications, and secure development lifecycle deliverables.
• Manage secure implementation, development practices, verification activities, provisioning security measures, and post-release security continuity.
• Act as primary contact for security incident responses post-release, organizing appropriate mitigation actions.
• Maintain ongoing product security support covering remediation, maintenance, and end-of-life processes.

Required Qualifications

• Formal security training or relevant certification completed.
• Approximately 10 years of experience in securing development processes, product security implementations, and assurance systems within product programs aligned to established standards.
• Practical expertise with relevant standards and regulatory frameworks such as IEC62443, ISO21434, US FDA, EU CRA.
• Deep knowledge of product-level security requirements spanning hardware SoC architectures, secure boot, hardware cryptography, and embedded software security; 3+ years in silicon SoC security design preferred.
• Strong technical foundation covering software, hardware, network, and cloud security related to embedded or connected products.
• Excellent collaboration skills for working across product, architecture, software, hardware, quality, and assurance teams.

Additional Skills and Competencies

• Ability to clearly articulate security decisions and cultivate trust with both internal stakeholders and customers.
• Skill in converting market, customer, and regulatory inputs into actionable product security requirements and plans.
• Capacity to manage long-term security obligations including compliance evidence, certifications, and post-release maintenance.
• Comfortable working in cross-functional teams where security intersects architecture, implementation, verification, manufacturing, and operational support functions.

Additional Information

• Applicants who require access to technical data may be subject to export licensing review per U.S. Department of Commerce and Department of State regulations; exceptions apply to U.S. citizens and protected individuals.
• Analog Devices is committed to equal opportunity employment promoting diversity and inclusivity regardless of any legally protected characteristic.
• Travel requirement: Approximately 10% of the time.
• Shift: First shift, daytime hours.