About this role
Lead, Application Security, Cybersecurity, Grade 15.
As a Lead, you will be onsemi's technical leader for application security — responsible for securing the software we build, buy, and run across enterprise and manufacturing applications. You'll set the standards, do the deep technical work, and scale security through the engineering organization, including a network of Security Champions. It's a build‑and‑shape opportunity: you'll mature a secure‑by‑design program against a clear roadmap, and put modern AI‑assisted tooling to work to accelerate secure delivery — with human oversight.
#L1-LK1
What you need
- BE/ME in computer science, electronics, or a related technical field — or equivalent experience .
- ~12+ years in software or information security, including demonstrated technical leadership of application‑security programs or initiatives (e.g., leading a champions network, mentoring engineers, driving cross‑team adoption).
- Proven expertise in software security assessment, threat modeling, and secure architecture.
- Strong grasp of OWASP Top 10, ASVS, SAMM, NIST SSDF, CWE, CVSS .
- Hands‑on proficiency with SAST, DAST, and SCA integrated into CI/CD pipelines.
- Experience with SBOM and software supply‑chain security.
- Proficiency in Python scripting.
- Ability to evaluate AI output for accuracy and manage AI‑specific risks (prompt injection, data leakage).
- Strong written communication for technical documentation and risk reporting, and the ability to influence senior stakeholders.
Preferred
- Experience with cloud security (AWS, Azure, or GCP), containers/Kubernetes, and IaC scanning .
- Hands‑on experience using LLMs / agentic AI for security work (code review, triage, remediation).
- A second programming language (Java, C/C++, or JavaScript).
- Experience building agentic DevSecOps / AI security‑testing workflows.
- Exposure to ISO/SAE 21434 , embedded, or semiconductor software security.
- Experience coordinating vendors and multi‑site stakeholders.
#L1-LK1