Senior Security Analyst: Assurance and Global Compliance

Location: San Jose, California, United States

Time Type: Full time

Job Description

Job Details:

Job Description:

About the Role

We are looking for a Senior Security Analyst to help define and scale security assurance and global compliance practices across our engineering and product organizations. In this role, you will turn security and regulatory expectations into practical frameworks, tools, reviews, and reporting that teams can adopt and use effectively.

You will help shape our Security Development Lifecycle, improve the way security processes are delivered, conduct security and compliance reviews, and support readiness for requirements such as the EU Cyber Resilience Act, IEC 62443, and automotive cybersecurity standards.

What You Will Do:

• Define SDL requirements, lifecycle checkpoints, control objectives, and evidence expectations.
• Create adoption frameworks and evaluate tools that make secure engineering, evidence collection, and reporting practical and repeatable.
• Conduct security reviews, CRA and compliance assessments, readiness reviews, and focused security hackathons.
• Coordinate with notified bodies and internal stakeholders on CRA evidence, reporting, and certification-readiness activities.
• Support customers whose products integrate Altera FPGAs by helping interpret security requirements, identify evidence needs, and coordinate product-certification readiness.
• Track findings and remediation plans, validate corrective actions, and report status to technical and leadership audiences.

Salary Range

The pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance.

 

$178,200 - $258,000 USD

 

We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.

#LI-MD1

Qualifications:

Minimum Qualifications

• Bachelor’s or Master’s degree in Computer Science, Electrical or Computer Engineering, Cybersecurity, Information Systems, or a related field.
• 10+ years of experience in security engineering, product security, security assurance, cybersecurity governance, compliance, or a related field, including at least 3 years in product security, security architecture, assurance leadership, technical leadership, or cross-functional program ownership.
• Experience defining SDL and secure-engineering processes and conducting security reviews, compliance assessments, audits, or certification-readiness activities.
• Ability to translate CRA, standards, regulations, and customer requirements into clear engineering controls, evidence plans, reports, and remediation actions.
• Experience assessing complex software, firmware, embedded, semiconductor, cloud, or platform environments

Preferred Qualifications

• Experience working with CRA, IEC 62443, ISO/SAE 21434, UN R155/UN R156, TISAX, ISO 27001, NIST, notified bodies, or customer certification programs.
• Experience in semiconductor, FPGA, silicon, embedded systems, automotive, firmware, hardware/software, or other security-critical product environments.
• Familiarity with software supply-chain security, SBOMs, vulnerability disclosure, third-party/open-source risk, and evidence automation.
• Experience evaluating GRC, compliance-automation, security-testing, or evidence-management tools; relevant security certifications are a plus.

Job Type:

Regular

Shift:

Shift 1 (United States of America)

Primary Location:

San Jose, California, United States

Additional Locations:

Posting Statement:

All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.