Manager - Product Security - AZ - Chandler, United States
Originally posted 8 August 2026 by the employer.
This role focuses on product security governance, risk, and regulatory readiness for embedded systems.
About the role
This role involves shaping how security is embedded into silicon, firmware, and software across Microchip's product lines.
What you'll do
- Define and deploy product security governance frameworks across Business Units.
- Establish methodologies for product security risk classification, threat modeling, and regulatory scoping.
- Translate evolving cybersecurity regulations, standards, and guidance into actionable internal requirements.
- Define and govern product vulnerability management processes within the Product Security Office.
- Define and govern the enterprise framework for threat modeling and product risk classification.
- Monitor and assess evolving cybersecurity regulations, standards, and industry expectations.
What you'll need
- Bachelor's or Master's degree in Electrical Engineering, Computer Science, Cybersecurity, Embedded Systems, or a related field.
- 12.5+ years of experience in cybersecurity, product security, embedded security, or semiconductor security.
- 5+ years of experience in product security governance, secure development lifecycle, security program management, or regulatory readiness roles.
- 3+ years in a leadership or senior role driving cross-functional security initiatives.
- Strong understanding of embedded systems, semiconductor products, firmware, software, hardware security, cryptography, and product lifecycle processes.
- Experience with EU Cyber Resilience Act, RED cybersecurity requirements, NIS2, EUCC, SESIP, Common Criteria, or related cybersecurity regulatory frameworks.
- Experience with product security governance frameworks, threat modeling, risk assessment, vulnerability management, or PSIRT processes.
- Familiarity with standards and frameworks such as IEC 62443, ISO 21434, OWASP, STRIDE, MITRE ATT&CK, EMB3D.
- Experience translating regulatory, customer, and standards requirements into practical engineering and governance processes.
Nice to have
- Experience in semiconductor, embedded systems, industrial automation, automotive, IoT, medical, or security certification domains.
- Experience with threat modeling tools.
- Experience with SBOM tooling, CVE processes, CNA operations, vulnerability databases, and open-source vulnerability monitoring.
- Experience participating in standards bodies, working groups, industry associations, or regulatory consultations.
- Program management experience, including KPI dashboards, governance cadence, and maturity models.
Skills: product security governance, threat modeling, vulnerability management, embedded security, EU Cyber Resilience Act
This role has been open 70 days — well above the 60-day median for Hardware Security Engineering roles.
Hardware Security Engineering · Hardware Security
|
Open roles in category
185
|
Median days open
60 d
|
Median salary
$224k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | Microchip Technology | All employers we track in this specialty (185 roles · 46 employers) |
|---|---|---|
| Open roles in this specialty | 4 | 185 |
| Median days open | 70 d | 60 d (+10 d vs this employer) |
| Median salary (USD postings) | — | $224k |
Skills observed across this category: product security governance, threat modeling, vulnerability management, embedded security, EU Cyber Resilience Act
Who's hiring in this category
- NVIDIA · 28 open roles · median 34 d
- NXP Semiconductors · 23 open roles · median 108 d
- Qualcomm · 17 open roles · median 122 d
- Arm Holdings · 13 open roles · median 102 d
- STMicroelectronics · 11 open roles · median 16 d
- AMD · 8 open roles · median 58 d
How we counted: 185 open Hardware Security Engineering (Hardware Security) roles from 46 employers tracked in the SemiconductorJobs index, counted 18 Oct 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there. Figures refresh nightly.