Senior Product Security Engineer

About the role

Synopsys is looking for a Senior Product Security Engineer to lead security architecture, threat modeling and secure code assessments across its product lines. The role works with engineering, architecture and product teams to embed security and privacy into every stage of the product lifecycle, from pre-market to post-market, and to shape organization-wide security policies.

Key responsibilities

• Lead security architecture and design reviews, threat modeling and secure code assessments across multiple product lines.
• Define and implement secure-by-design best practices, requirements and guardrails for engineering and product teams.
• Champion Product Security policies and ensure compliance with industry standards and regulations.
• Embed security and privacy requirements into new product designs and features with cross-functional teams.
• Provide expert consultation on security engineering and architecture, and develop scalable security architectural specifications for cloud and enterprise platforms.
• Drive Product Security engagement throughout the product lifecycle, including pre-market and post-market activities.
• Establish processes that align security capabilities with business priorities and emerging threats.
• Represent Product Security in cross-functional initiatives, review boards and stakeholder discussions, and take part in internal and external audits.
• Design and deliver Product Security training for technical and non-technical audiences, and support cloud management and automation improvements.
• Mentor and coach engineers organization-wide on Product Security concepts and best practices.

Required profile

• Bachelor's degree in CyberSecurity, Computer Science, Engineering, Mathematics or a related field (or equivalent experience).
• 4+ years of hands-on software development experience in at least one programming language, preferably C, C++, C# or Python.
• 4+ years of hands-on Product Security Engineering experience in an enterprise environment.
• Strong understanding of data protection, privacy, security engineering, architecture and assurance principles.
• Preferred: security certifications such as CISSP, CISA, CISM or CRISC; experience with BISO or Security Champions programs is a plus.

Required skills

• Expertise in security architecture, threat modeling, secure code assessment and compliance frameworks.
• Ability to write and review code in multiple programming languages.
• Excellent communication, collaboration and stakeholder management skills.

The position is listed as hybrid (#LIHybrid). Total rewards, including salary range and benefits, are shared with the recruiter during the hiring process.