Senior Security Analyst: Assurance and Global Compliance

Altera Semiconductor•San Jose, CA

1d•Onsite

About The Position

We are looking for a Senior Security Analyst to help define and scale security assurance and global compliance practices across our engineering and product organizations. In this role, you will turn security and regulatory expectations into practical frameworks, tools, reviews, and reporting that teams can adopt and use effectively. You will help shape our Security Development Lifecycle, improve the way security processes are delivered, conduct security and compliance reviews, and support readiness for requirements such as the EU Cyber Resilience Act, IEC 62443, and automotive cybersecurity standards.

Requirements

Bachelor’s or Master’s degree in Computer Science, Electrical or Computer Engineering, Cybersecurity, Information Systems, or a related field.
10+ years of experience in security engineering, product security, security assurance, cybersecurity governance, compliance, or a related field, including at least 3 years in product security, security architecture, assurance leadership, technical leadership, or cross-functional program ownership.
Experience defining SDL and secure-engineering processes and conducting security reviews, compliance assessments, audits, or certification-readiness activities.
Ability to translate CRA, standards, regulations, and customer requirements into clear engineering controls, evidence plans, reports, and remediation actions.
Experience assessing complex software, firmware, embedded, semiconductor, cloud, or platform environments.

Nice To Haves

Experience working with CRA, IEC 62443, ISO/SAE 21434, UN R155/UN R156, TISAX, ISO 27001, NIST, notified bodies, or customer certification programs.
Experience in semiconductor, FPGA, silicon, embedded systems, automotive, firmware, hardware/software, or other security-critical product environments.
Familiarity with software supply-chain security, SBOMs, vulnerability disclosure, third-party/open-source risk, and evidence automation.
Experience evaluating GRC, compliance-automation, security-testing, or evidence-management tools; relevant security certifications are a plus.

Responsibilities

Define SDL requirements, lifecycle checkpoints, control objectives, and evidence expectations.
Create adoption frameworks and evaluate tools that make secure engineering, evidence collection, and reporting practical and repeatable.
Conduct security reviews, CRA and compliance assessments, readiness reviews, and focused security hackathons.
Coordinate with notified bodies and internal stakeholders on CRA evidence, reporting, and certification-readiness activities.
Support customers whose products integrate Altera FPGAs by helping interpret security requirements, identify evidence needs, and coordinate product-certification readiness.
Track findings and remediation plans, validate corrective actions, and report status to technical and leadership audiences.