Sr. Product Security DevSecOps Engineer

$120,000 - $181,000/Yr

Synopsys - Morrisville, NC

Full-time - Mid Level

Morrisville, NC

Publishing Industries

About the position

The Sr. Product Security DevSecOps Engineer at Synopsys is responsible for leading product security processes, implementing security policies, and ensuring compliance with industry standards. This role involves guiding new product development to incorporate security and privacy requirements, consulting with product teams, and enhancing the overall product security posture through innovative AI tool integration. The engineer will also mentor team members, manage audits, and drive continuous improvement in security practices.

Responsibilities

• Leading the product security processes for Synopsys.
• Implementing Product Security policies across the organization and ensuring compliance with regulations and standards.
• Guiding new product development activities to design Security and Privacy requirements into products.
• Consulting with product development teams to implement state-of-the-art Security Engineering & Architecture requirements.
• Ensuring Product Security support for products pre- and post-market.
• Researching AI tools and developing integration solutions to assist with product security reviews.
• Identifying tools and developments to assist teams with AI product reviews.
• Implementing, integrating, and maintaining security tools with various teams.
• Identifying areas of improvement in CI/CD pipelines.
• Interpreting KPI trends and driving continuous improvement processes.
• Engaging in and potentially leading internal and external audits with regulatory representatives.
• Defining and providing training requirements on Product Security.
• Initiating and supporting internal containment and product holds for potential product escapes.
• Coaching and mentoring others in Product Security topics and activities.

Requirements

• Bachelor’s degree in product security, computer science, mathematics, statistics, or a related field.
• 6+ years of related work experience in product security.
• Previous experience working in a product security organization.
• Experience leveraging AI in security review processes.
• Strong knowledge of Product Security Concepts (e.g., Data Security and Privacy, Security Engineering and Architecture, Security Assurance).

Nice-to-haves

• Experience with BISO or Security Champion programs.
• Familiarity with industry frameworks & regulatory standards (e.g., PCI-DSS, HIPAA-HITECH, GDPR, ISO 27001/2, NIST CSF).
• Relevant certifications such as CISSP, CISA, CISM, CRISC preferred.

Benefits

• Comprehensive health benefits
• Wellness programs
• Financial benefits
• Annual bonus eligibility
• Equity options
• Discretionary bonuses