{"id":950849,"url":"https://alion.io/job/analog-devices-head-of-application-security","title":"Head of Application Security","company":{"id":58431,"name":"Analog Devices","domain":"analog.com","url":"https://alion.io/company/analog-devices","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":59,"ghost_share":0,"stale_share":0.729,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Wilmington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":219200,"max":301400,"currency":"USD","period":"year","gross":null,"usd_annual":301400},"salary_estimate":null,"experience_years_min":15,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"CMMC","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"IEC 62304","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"SBOM","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-24T00:00:00Z","employer_posted_date":"2026-08-24","last_verified_at":"2026-10-23T07:44:48Z","board_verified":false,"closed_at":null,"days_open":62,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":62},"description":"About Analog Devices\nAnalog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X.\nHead of Application Security\nThe leader of Application, AI and Product Security is a senior leadership role responsible for protecting the software, artificial intelligence, and products at the heart of ADI’s business. Reporting to the Chief Information Security Officer (CISO), this leader ensures that everything ADI builds and ships is secure by design - worthy of the trust of our automotive, aerospace and defense, healthcare, and industrial customers, and resilient against the most capable threat actors. As ADI accelerates at the Intelligent Edge, embedding software, AI, and connectivity into the components the world depends on, this role makes security a competitive advantage.\nThis role is a “build-and-scale” mandate spanning three connected disciplines. This leader will stand up and mature a developer-first application security (DevSecOps) capability across ADI’s software development lifecycle; establish a risk-managed AI security and governance program covering generative AI, large language models, and emerging agentic AI use cases; and grow a company-wide product security practice - building on ADI’s existing product security incident response and coordinated vulnerability disclosure capabilities - for the products ADI designs, manufactures, and ships. Working across IT, LRO, and the business (Software & Digital Platforms, Engineering Enablement, Global Operations & Technology), the role connects these threads into a single, risk-managed security strategy that drives alignment, informs executive and Board decision-making, and strengthens the resilience and trustworthiness of ADI’s technology.\nSequencing matters in this role. The immediate priority is application security embedded into ADI’s DevOps / CI-CD environment; the near-term priority is a risk-managed AI security program, beginning with generative AI and LLM governance and controls before extending to agentic AI; and the third priority is maturing a full-scope, company-wide product security practice. The leader will establish a disciplined discovery and stakeholder-alignmentperiod before scaling execution across all three.\nKey Responsibilities:\nLead the strategy, build-out, and operation of ADI’s application security, AI security, and product security capabilities, including:\n Application Security (DevSecOps): Establish and mature secure software development lifecycle (secure-SDLC) policy, standards, reference architectures, and tooling (SAST, SCA, DAST, secret scanning); harden the software supply chain - source repositories, Continuous Integration / Continuous Delivery/Deployment (CI/CD) pipelines, build systems, credentials, and dependencies - and drive software bill of materials (SBOM) generation and trusted-publishing at scale.\n AI Security: Define and operate a risk-managed AI security and governance program aligned to recognized frameworks (e.g., NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, MITRE ATLAS), beginning with generative AI and LLM controls, and operations, and extending to secure agentic AI use cases including non-human / agent identity, action guardrails, and human-in-the-loop controls.\n Product Security: Grow a company-wide, risk-managed product security practice anchored to a secure product development lifecycle standard (e.g., IEC 62443-4-1) and embedded into the New Product Introduction (NPI) process; own and mature ADI’s Product Security Incident Response Team (PSIRT) capability, coordinated vulnerability disclosure, CVE/CVSS practice, and SBOM/HBOM strategy for shipped firmware and hardware.\nServe as a trusted strategic advisor to the CISO, executive leadership, and the Board of Directors - translating complex application, AI, and product security exposure into clear, quantified business, customer, and financial impact, and shaping the narrative around key security decisions, priorities, and tradeoffs.\nBuild, lead, and develop a high-performing, multidisciplinary team; make deliberate build / borrow / buy decisions and cultivate a broad network of security champions embedded across engineering and the business units.\nChampion a security-by-design, paved-road culture in which the secure path is the fast path - earning adoption from engineering and improving velocity while reducing risk, with measurable coverage, adoption, and risk-burndown reporting.\nAlign application, AI, and product security to the regulatory and customer requirements that govern ADI’s markets - including automotive (ISO/SAE 21434, ISO 26262), aerospace and defense (ITAR/EAR, CMMC), healthcare (IEC 62304, FDA cybersecurity guidance), and industrial (IEC 62443) - and support customer-facing trust, audits, and attestations.\nIntegrate application, AI, and product security risk into ADI’s enterprise risk model, establish and chair cross-functional governance with a clear risk-acceptance and exception process, and report posture, key risk indicators, and program progress to executive and Board-level audiences.\nLead response to significant application, AI, or product security incidents, including decision-making, regulatory engagement, external communications, and post-incident learning.\nOperate with a high degree of autonomy in a fast-paced, evolving environment; identify opportunities to improve how ADI secures its software, AI, and products, and establish scalable standards and best practices.\nLead and scale a high-performing multidisciplinary organization across application, AI, and product security, establishing the structure, priorities, and accountability needed to deliver impactful enterprise security outcomes for ADI\nBuild a strong talent bench by attracting, developing, and retaining top security talent, strengthening leadership capability, and fostering a collaborative culture of agility, ownership, and continuous improvement\nServes as a credible, trusted partner to internal stakeholders and engineering teams, ensuring security standards enable delivery, strengthen product trust, and support ADI’s innovation and growth priorities\nRequired Qualifications\nBachelor’s degree required, preferably in Engineering, Computer Science, Cybersecurity, or a related technical field (or equivalent experience).\n15+ years of progressive cybersecurity experience, including significant experience in a senior security leadership role (e.g., Deputy CISO, CISO, or a Senior Director/Executive Director leading application, product, or AI security) in a large-scale, complex environment.\n15+ years of sponsoring and managing complex programs and projects. A breathe of program delivery across application delivery, product and cybersecurity is preferred.\nProven experience building, leading, and scaling security functions across large, global engineering organizations, with a track record of building high-performing teams and sustaining engagement through organizational change.\nDeep expertise establishing secure-SDLC / DevSecOps programs and embedding automated security testing (SAST/SCA/DAST/secretscanning) into CI/CD pipelines, with hands-on understanding of software supply-chain security, threat modeling, and secure code / design review.\nWorking knowledge of AI/GenAI security and governance frameworks and controls - including model risk, data leakage, prompt-injection defense, and AI incident response - and familiarity with the emerging risks of agentic AI.\nExperience with product security, PSIRT / coordinated vulnerability disclosure, and SBOM / software-supply-chaintransparency, and the ability to interpret and map requirements from security and safety frameworks relevant to ADI’s markets (e.g., IEC 62443, ISO/SAE 21434, ISO 26262, IEC 62304, NIST CSF, CMMC, ITAR/EAR).\nDemonstrated ability to translate highly complex technical risk into clear, quantified, business-focused terms (e.g., FAIR or equivalent) and communicate to both technical and non-technical audiences, including executives and the Board.\nStrong executive presence and stakeholder-managementskills, with experience working directly with senior leadership and influencing across organizational boundaries.\nDemonstrated ability to operate with significant autonomy, navigate ambiguity, and balance strategic thinking with hands-on execution in a dynamic, fast-paced environment.\nIdeal Qualifications\nAdvanced degree and relevant certifications (e.g., CISSP, CISM).\nExperience in the semiconductor, electronics, or advanced-hardware industry, or in another regulated, IP-intensive, or critical-infrastructure-adjacentenvironment (e.g., aerospace/defense, automotive, medical devices, or life sciences).\nExperience operating in export-controlled and regulated environments (e.g., ITAR/EAR, CMMC).\nExperience standing up a new security capability or function from the ground up, including establishing governance, standards, and scalable operating models across a large organization.\nExperience supporting Board-level communications, enterprise risk reviews, or executive decision forums on cybersecurity posture and strategy.\nFor positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S. Department of Commerce - Bureau of Industry and Security and/or the U.S. Department of State - Directorate of Defense Trade Controls. As such, applicants for this position - except US Citizens, US Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) - may have to go through an export licensing review process.\nAnalog Devices is an equal opportunity employer. We foster a culture where everyone has an opportunity to succeed regardless of their race, color, religion, age, ancestry, national origin, social or ethnic origin, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, parental status, disability, medical condition, genetic information, military or veteran status, union membership, and political affiliation, or any other legally protected group.\nEEO is the Law: Notice of Applicant Rights Under the Law.\nJob Req Type: ExperiencedRequired Travel: Yes, 10% of the timeShift Type: 1st Shift/DaysThe expected wage range for a new hire into this position is $219,200 to $301,400.Actual wage offered may vary depending on work location, experience, education, training, external market data, internal payequity, or other bona fide factors.\n\nThis position qualifies for a discretionary performance-based bonus which is based on personal and company factors.\n\nThis position includes medical, vision and dental coverage, 401k, paid vacation, holidays, and sick time, and other benefits.","description_format":"text","description_chars":11150,"description_truncated":false,"requirements":{"experience_years_min":15,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Sensors & Transducers","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-09-16T00:43:23Z"}],"visa":[],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.577,"p_room":0.44,"age_days":62,"expected_fill_days":49,"reasons":["conf:46","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":301400,"is_top_pay":true},"html_url":"https://alion.io/job/analog-devices-head-of-application-security","json_url":"https://alion.io/job/analog-devices-head-of-application-security.json","meta":{"generated_at":"2026-10-25T08:22:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11921,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58431},"rest":"https://alion.io/mcp/rest/get_company?id=58431"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fanalog-devices-head-of-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fanalog-devices-head-of-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fanalog-devices-head-of-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/analog-devices-head-of-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fanalog-devices-head-of-application-security"}]}