Job description

Job Details: Job Description: About the Role We are looking for a Senior Security Analyst to help define and scale security assurance and global compliance practices across our engineering and product organizations. In this role, you will turn security and regulatory expectations into practical frameworks, tools, reviews, and reporting that teams can adopt and use effectively. You will help shape our Security Development Lifecycle, improve the way security processes are delivered, conduct security and compliance reviews, and support readiness for requirements such as the EU Cyber Resilience Act, IEC 62443, and automotive cybersecurity standards. What You Will Do: Define SDL requirements, lifecycle checkpoints, control objectives, and evidence expectations. Create adoption frameworks and evaluate tools that make secure engineering, evidence collection, and reporting practical and repeatable. Conduct security reviews, CRA and compliance assessments, readiness reviews, and focused security hackathons. Coordinate with notified bodies and internal stakeholders on CRA evidence, reporting, and certification-readiness activities. Support customers whose products integrate Altera FPGAs by helping interpret security requirements, identify evidence needs, and coordinate product-certification readiness. Track findings and remediation plans, validate corrective actions, and report status to technical and leadership audiences. Salary Range The pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance. $178,200 - $258,000 USD We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations. #LI-MD1 Qualifications: Minimum Qualifications Bachelor’s or Master’s degree in Computer Science, Electrical or Computer Engineering, Cybersecurity, Information Systems, or a related field. 10 years of experience in security engineering, product security, security assurance, cybersecurity governance, compliance, or a related field, including at least 3 years in product security, security architecture, assurance leadership, technical leadership, or cross-functional program ownership. Experience defining SDL and secure-engineering processes and conducting security reviews, compliance assessments, audits, or certification-readiness activities. Ability to translate CRA, standards, regulations, and customer requirements into clear engineering controls, evidence plans, reports, and remediation actions. Experience assessing complex software, firmware, embedded, semiconductor, cloud, or platform environments Preferred Qualifications Experience working with CRA, IEC 62443, ISO/SAE 21434, UN R155/UN R156, TISAX, ISO 27001, NIST, notified bodies, or customer certification programs. Experience in semiconductor, FPGA, silicon, embedded systems, automotive, firmware, hardware/software, or other security-critical product environments. Familiarity with software supply-chain security, SBOMs, vulnerability disclosure, third-party/open-source risk, and evidence automation. Experience evaluating GRC, compliance-automation, security-testing, or evidence-management tools; relevant security certifications are a plus. Job Type: Regular Shift: Shift 1 (United States of America) Primary Location: San Jose, California, United States Additional Locations: Posting Statement: All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.

Requirements

Must-haves

Job Description: About the Role
Define SDL requirements, lifecycle checkpoints, control objectives, and evidence expectations.
Create adoption frameworks and evaluate tools that make secure engineering, evidence collection, and reporting practical and repeatable.
Conduct security reviews, CRA and compliance assessments, readiness reviews, and focused security hackathons.
Coordinate with notified bodies and internal stakeholders on CRA evidence, reporting, and certification-readiness activities.
Support customers whose products integrate Altera FPGAs by helping interpret security requirements, identify evidence needs, and coordinate product-certification readiness.
Track findings and remediation plans, validate corrective actions, and report status to technical and leadership audiences.
We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.
Qualifications: Minimum Qualifications
Bachelor’s or Master’s degree in Computer Science, Electrical or Computer Engineering, Cybersecurity, Information Systems, or a related field.
Experience defining SDL and secure-engineering processes and conducting security reviews, compliance assessments, audits, or certification-readiness activities.
Ability to translate CRA, standards, regulations, and customer requirements into clear engineering controls, evidence plans, reports, and remediation actions.
Experience assessing complex software, firmware, embedded, semiconductor, cloud, or platform environments

Nice-to-haves

Experience working with CRA, IEC 62443, ISO/SAE 21434, UN R155/UN R156, TISAX, ISO 27001, NIST, notified bodies, or customer certification programs.
Experience in semiconductor, FPGA, silicon, embedded systems, automotive, firmware, hardware/software, or other security-critical product environments.
Familiarity with software supply-chain security, SBOMs, vulnerability disclosure, third-party/open-source risk, and evidence automation.
Experience evaluating GRC, compliance-automation, security-testing, or evidence-management tools; relevant security certifications are a plus.
Job Type: Regular
Shift: Shift 1 (United States of America)
Primary Location: San Jose, California, United States

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: workday
Effort: long