Senior Manager, Information Security - Santa Clara, United States
Originally posted 30 September 2026 by the employer.
Protect proprietary chip design IP (RTL, GDSII), EDA workflows, and hardware roots of trust.
About the role
As the first dedicated Information Security hire reporting to the VP of Information Technology and Infrastructure Services, the Senior Manager, Information Security will build a unified security function, manage the security roadmap and budget, and protect corporate, cloud, and engineering environments. The scope focuses on safeguarding proprietary chip design IP (RTL, GDSII), EDA workflows, software supply chains, and AI inference environments.
What you'll do
- Build and execute a unified security roadmap and budget across corporate IT, cloud, and product development, while consolidating tools and managing security vendors. - Protect chip design IP (RTL, GDSII), EDA workflows, and software source through least-privilege access, network segmentation, exfiltration controls, and encrypted transfer to foundry and OSAT partners. - Partner with hardware teams to evaluate foundry, component-sourcing, and logistics risks, and co-architect hardware roots of trust, unique chip identifiers, and secure boot. - Establish trusted software supply chain practices, including SBOMs, signed builds, and provenance tracking for compilers, runtimes, and model artifacts. - Mature identity governance, endpoint detection and response, vendor risk management, incident response, and compliance readiness for SOC 2 Type II and ISO/IEC 27001. - Secure cloud, colocation, on-premises, API, and customer-facing inference environments using Zero Trust, phishing-resistant MFA, and DevSecOps practices.
What you'll need
- 7+ years of experience in information security. - 3+ years of experience leading security programs or teams. - Technical literacy across corporate IT (RBAC, MDM, SIEM), cloud environments (Kubernetes), and CI/CD security. - Experience protecting IP-intensive engineering environments, such as semiconductor, hardware, defense, or sensitive design and source data. - Practical understanding of how LLMs and autonomous AI agents operate, interact with APIs, and handle sensitive data. - Bachelor's degree or equivalent experience.
Nice to have
- Direct experience managing semiconductor or hardware supply chain security, such as foundry/OSAT relationships, secure IP transfer, hardware roots of trust, or anti-counterfeiting measures. - Experience securing hybrid, colocation, or on-premises lab infrastructure alongside cloud environments. - Experience managing compliance audits from initial readiness through SOC 2 Type II or ISO 27001 certification. - Active industry credentials, such as CISSP, CISM, or specialized AI/cloud security certifications.
Skills: chip design IP, EDA workflows, hardware roots of trust, secure boot, software supply chain practices
This role has been open 27 days — well below the 65-day median for Hardware Security Engineering roles.
Hardware Security Engineering · Hardware Security
|
Open roles in category
178
|
Median days open
65 d
|
Median salary
$224k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | d-Matrix | All employers we track in this specialty (178 roles · 42 employers) |
|---|---|---|
| Open roles in this specialty | 1 | 178 |
| Median days open | 27 d | 65 d (−38 d vs this employer) |
| Median salary (USD postings) | — | $224k |
Skills observed across this category: chip design IP, EDA workflows, hardware roots of trust, secure boot, software supply chain practices
Who's hiring in this category
- NVIDIA · 31 open roles · median 41 d
- NXP Semiconductors · 23 open roles · median 96 d
- Qualcomm · 17 open roles · median 131 d
- Arm Holdings · 13 open roles · median 111 d
- AMD · 8 open roles · median 67 d
- STMicroelectronics · 8 open roles · median 29 d
How we counted: 178 open Hardware Security Engineering (Hardware Security) roles from 42 employers tracked in the SemiconductorJobs index, counted 27 Oct 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there. Figures refresh nightly.