Product Security Incident Response Engineer

About Analog Devices

Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, and software technologies into solutions that help drive advancements in digitized factories, mobility, and digital healthcare, combat climate change, and reliably connect humans and the world. With revenue of more than $9 billion in FY24 and approximately 24,000 people globally, ADI ensures today's innovators stay Ahead of What’s Possible™.

Product Security Incident Response Engineer

Analog Devices, Inc. is looking for a Product Security Incident Response Engineer to join our team in Limerick, Ireland or Edinburgh, Scotland offices. As a Product Security Incident Response Engineer, you will be responsible for identifying security vulnerabilities in products and working with individual product teams to ensure the vulnerability is corrected in a cost-effective manner.

Essential Duties & Responsibilities

• Coordinate product incident response activities, from external and internal finders, across multiple product lines within the ADI product catalog with a strong focus on software.
• 3+ years demonstrable proficiency with incident response responsibilities in one or more of the following areas:
  • Internet of Things (IOT), hardware, web applications, and/or software applications.
• Partner with product engineering teams to identify, triage, develop, and test remediations while following the PSIRT process.
• Assist with Security Assessments of various products during their development to comply with industry standards and best practices.
• Communicate effectively and professionally with external and internal finders, such as security researchers initiating contact with ADI about potential vulnerabilities.

The successful candidate will be able to

• Learn new technologies, products, and tooling to effectively apply the PSIRT process.
• Have a mindset focused on process improvement both for the PSIRT process and ADI’s lifecycle development process.
• Communicate clearly and professionally with stakeholders and leadership regarding vulnerability findings and remediations.
• Demonstrate a strong understanding of security fundamentals.

Preferred Qualifications

• Prior development experience in one or more of the following areas:
  • Software development, web development, silicon development, or IoT development.
• Security certifications (or able to obtain within 6 months):
  • CEH, CISSP, GIAC, GCIH, GCIA.

Education Level: Bachelor’s Degree

Travel Required: Yes, 10% of the Time

Shift Type: 1st Shift/Days

Job Req Type: Experienced

Equal Employment Opportunity Statement

Analog Devices is an equal opportunity employer. We foster a culture where everyone has an opportunity to succeed regardless of race, color, religion, age, ancestry, national origin, social or ethnic origin, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, parental status, disability, medical condition, genetic information, military or veteran status, union membership, and political affiliation, or any other legally protected group.

For positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S. Department of Commerce – Bureau of Industry and Security and/or the U.S. Department of State – Directorate of Defense Trade Controls. As such, applicants for this position – except U.S. Citizens, U.S. Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) – may have to go through an export licensing review process.