Manager, Product Cybersecurity — Semiconductor IP

Job Description and Requirements

We Are:

At Synopsys, we drive the innovations that shape the way we live and connect. Our technology is central to the Era of Pervasive Intelligence, from self-driving cars to learning machines. We lead in chip design, verification, and IP integration, empowering the creation of high-performance silicon chips and software content. Join us to transform the future through continuous technological innovation.

You Are:

You are a leader who builds trust with product teams, engineers, and the analysts you manage. You listen first, write in clear language, and take ownership of results. You work well with people in different disciplines and locations, and you help others do their best work without needing to be the loudest person in the room.

You are practical when information is incomplete. You explain complex topics in simple terms, stay calm when the design changes, and challenge unclear choices in a respectful way. You care about teamwork, growing people, and leaving work that others can use.

This is a full-time role.

What You’ll Be Doing:

- Lead a team of cybersecurity analysts who support semiconductor IP products: set priorities, assign analysts to product teams, and balance workload across the portfolio.
- Set the direction for threat analysis of semiconductor IP and associated firmware, including assets, access points, threat scenarios, attack paths, and controls in the IP versus requirements for the integrator.
- Guide the team in running security analysis as part of the cybersecurity lifecycle, from planning through design, implementation, verification, and release.
- Review the team’s analysis, requirements, and integration guidance for quality, consistency, and clear assumptions before they reach product teams and customers.
- Advise product leaders and architects on cybersecurity requirements, architecture, and verification so security work is built into the existing development flow.
- Oversee customer-facing security integration guidance that describes the threat landscape, implemented controls, and how customers should integrate the IP.
- Guide the team’s support for in-field cybersecurity activities, including vulnerability assessment, incident analysis, and security advisories, working with cybersecurity architects and corporate vulnerability response.
- Coach and develop analysts: set clear goals, give regular feedback, and plan career growth.
- Facilitate working sessions with cybersecurity architects and design and verification leads; keep analysis consistent across similar IP classes.
- Plan the team’s work with product teams in agile sprints: align security work with the product backlog, adjust scope when the design changes, and keep evidence current at each milestone.
- Promote the use of Python and agentic workflows (AI agents, structured prompts, and human-in-the-loop review) so the team works faster while analysts keep ownership of their findings.
- Run team work in Jira, Confluence, Git, and GitLab: track work and capacity, keep documentation current, and report status to leadership.

The Impact You Will Have:

- Give product teams threat analysis they can trust and act on without re-deriving the work.
- Build a team of analysts who grow in skill, own their conclusions, and deliver steady quality.
- Improve consistency of analysis, risk language, and guidance across similar IP classes.
- Leave cybersecurity requirements and verification objectives that design and verification teams can execute.
- Strengthen the cybersecurity lifecycle for IP products so security work stays current as the design changes.
- Help customers integrate Synopsys IP with guidance they can follow without a security specialist in the room.
- Help the organization respond to in-field issues with clear assessment and practical advisories.
- Raise team throughput with Python and agentic workflows without lowering the quality of technical conclusions.

What You’ll Need:

- Bachelor’s degree in electrical engineering, computer engineering, computer science, or a related field, or equivalent practical experience. An advanced degree is welcome, not required.
- Ten or more years in product cybersecurity, embedded security, digital design, digital verification, or a closely related engineering role, including four or more years leading people or technical teams. Stronger evidence on the required capabilities can offset fewer years.
- Experience managing or leading analysts or engineers: setting priorities, giving feedback, coaching, hiring, and growing people.
- Practical experience performing or reviewing threat modeling, threat analysis, and risk assessment on real products, not only training exercises.
- Ability to judge whether threat-analysis work identifies assets, attackers, attack surfaces, and attack paths, and maps each path to a mitigation (in-product control or integration requirement).
- Comfort working without a single known end-system: analysis must cover representative integration scenarios and state assumptions clearly.
- Experience applying a cybersecurity lifecycle across planning, requirements, design, implementation, verification, and release.
- Ability to turn threat-analysis results into requirements, design guidance, verification objectives, and release evidence.
- Hands-on understanding of embedded systems: SoC or MCU integration, firmware, hardware/software interfaces, memory-mapped registers, boot and debug, and on-chip interconnects.
- Background as a digital designer or a digital verification engineer, with the ability to read and discuss RTL (Verilog, SystemVerilog, or VHDL), architecture, interfaces, and register maps with designers and verification leads.
- Ability to judge whether a claimed cybersecurity control is implemented in the design and whether it is verifiable.
- Experience delivering work inside agile product teams, including re-scoping when product content changes.
- Working ability to read and review Python used for analysis and automation, and to guide analysts on readable, reusable scripts.
- Practical experience using AI agents and agentic workflows to speed research, drafting, and repetitive analysis, while keeping the human as owner of technical conclusions.
- Hands-on use of Jira, Confluence, Git, and GitLab (or an equivalent Git forge) for tickets, documentation, and review.
- Clear written and spoken English; able to lead technical sessions and communicate with leaders across geographically distributed teams.
- Familiarity with digital design and verification languages and methods, such as SystemVerilog, UVM (Universal Verification Methodology), and SystemC, and how verification teams use them to test security controls.
- Working knowledge of ISO/SAE 21434 or a comparable product-cybersecurity standard is helpful, as is analog or mixed-signal background, semiconductor IP product experience, vulnerability handling, or applied embedded cryptography.

Who You Are:

- You build trust with product teams, design teams, and your own analysts, and you keep working relationships strong when the discussion is difficult.
- You grow people. You give honest feedback, share credit, and help analysts take on more responsibility.
- You own the outcome for your team. You do not hand off judgment to a tool, a template, or the loudest voice in the room.
- You write and speak clearly so engineers, leaders, and customers can use your work without you in the room.
- You work well with incomplete information and out-of-context IP, and you state assumptions instead of hiding them.
- You challenge unclear practices in a respectful way and recommend improvements teams can actually adopt.
- You are collaborative and non-disruptive with product teams, including when you need them to change course.
- You are structured and detail-oriented, and you keep evidence current as the design changes.
- You are comfortable with agile change and re-prioritize the team’s work without waiting for a late gate.

The Team You’ll Be A Part Of:

You will lead the cybersecurity analysts who support Synopsys semiconductor IP products. Your analysts are assigned to IP product teams and work in their delivery cadence. You and your team collaborate with digital, analog, mixed-signal, and firmware engineers, and with cybersecurity architects, to complete analysis, guidance, and evidence through the cybersecurity lifecycle. The team works across regions. Its work products are used by product teams and by customers who integrate the IP.

Rewards and Benefits:

We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings. Your recruiter will provide more details about the salary range and benefits during the hiring process.

At Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability.