R&D Engineering, Manager

• The primary mandate for this position is to manage a team of engineers that perform Security Risk Analysis of Synopsys IP products, which may include participating in Threat Modeling and/or Security Validation Testing
• As the manager of the IP Security Risk Management Asia team the successful candidate will also participate in definition and maintenance of the Security Development Lifecycle for semiconductor IP products and may be a member of the Security Incident Response Team for semiconductor IP products
• This position will work globally with internal development teams and external customers to ensure conformance to related security and quality requirements
• The position may include such activities managing the development of related workflows and/or scripts; identification, definition, and driving of new security enhancement initiatives; contribute to security communications; and definition, documentation, and/or training of internal IP security policies and processes
• The position may also be involved in reviews, data collection & reporting
• There may be other duties as defined by the Management
• There may be limited domestic & international travel required.

Responsibilities

• Manage a team performing Security risk Assessments of digital, analog, mixed-signal, embedded firmware, and embedded software IP products
• Contribute to, manage, and/or review Threat Modeling and Security Validation Testing
• Contribute to definition and maintenance of the IP Security Development Lifecycle
• May act as a member of an IP Security Incident Response Team
• Define, Promote and Track the implementation of new IP Security initiatives
• Other related tasks as may be defined

Requirements

• University degree in Engineering or Computer Science with 8+ years of relevant experience
• Proficient in English
• Ability to work as part of a diverse group, with many remote members across different time zones
• Working knowledge of security threats, security risk assessments, security risk mitigation, and security incident reporting
• Knowledge of cryptography/cryptographic techniques, highly desired
• Knowledge of ISO/SAE 21434, highly desired
• Knowledge of semiconductor IP products and related development flows is an advantage
• Related security industry specific trainings and certifications are an advantage