{"id":2894694,"url":"https://alion.io/job/microchip-technology-manager-product-security","title":"Manager - Product Security","company":{"id":44188,"name":"Microchip Technology","domain":"microchip.com","url":"https://alion.io/company/microchip","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":100,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chandler, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":114000,"max_usd":227000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":414},"experience_years_min":13,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"SBOM","optional":true}],"status":"live","first_seen_at":"2026-08-07T00:00:00Z","employer_posted_date":"2026-08-07","last_verified_at":"2026-10-22T02:03:48Z","board_verified":true,"closed_at":null,"days_open":76,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":76},"description":"Are you looking for a unique opportunity to be a part of something great? Want to join a 17,000-member team that works on the technology that powers the world around us? Looking for an atmosphere of trust, empowerment, respect, diversity, and communication? How about an opportunity to own a piece of a multi-billion dollar (with a B!) global organization? We offer all that and more at Microchip Technology Inc.\nPeople come to work at Microchip because we help design the technology that runs the world. They stay because our culture supports their growth and stability. They are challenged and driven by an incredible array of products and solutions with unlimited career potential. Microchip’s nationally-recognizedLeadership Passage Programs support career growth where we proudly enroll over a thousand people annually. We take pride in our commitment to employee development, values-based decision making, and strong sense of community, driven by our Vision, Mission, and 11 Guiding Values; we affectionately refer to it as the Aggregate System and it’s won us countless awards for diversity and workplace excellence.\nOur company is built by dedicated team players who love to challenge the status quo; we did not achieve record revenue and over 30 years of quarterly profitability without a great team dedicated to empowering innovation. People like you.\nVisit our careers page to see what exciting opportunities and company perks await!\nJob Description:\nJoin the Team That's Securing the Future of Embedded Intelligence\nAt Microchip Technology, our products power the world - from automotive systems and industrial automation to aerospace, medical devices, and the Internet of Things. As cybersecurity regulations intensify globally and threats to embedded systems grow more sophisticated, Microchip is making a bold investment in product security leadership. This is your opportunity to be at the center of that transformation.\nWe are seeking a Manager, Product Security Governance to join our Product Security Office (PSO) - a high-visibility team shaping how security is embedded into silicon, firmware, and software across one of the world's leading semiconductor companies. Reporting to the Head of the Product Security Office, you will serve as a senior leader helping to define governance frameworks, drive cross-functional adoption, and strengthen regulatory readiness on a global scale.\nYou'll be shaping the foundation - establishing scalable processes, enabling engineering teams across Business Units, and driving measurable progress in threat modeling, vulnerability management, regulatory readiness, and supply chain security governance. You'll work at the intersection of cybersecurity strategy, engineering execution, and global standards - with direct impact on Microchip's ability to ship trusted, compliant, and resilient products worldwide.\nKey Responsibilities\n1. Product Security Governance, Risk & Regulatory Readiness\nDefine and guide the deployment of product security governance frameworks across Business Units.\nEstablish consistent methodologies for product security risk classification, threat modeling, and regulatory scoping.\nTranslate evolving cybersecurity regulations, standards, and guidance into actionable internal requirements and governance expectations.\nSupport company-wide readiness for the EU Cyber Resilience Act and other applicable global cybersecurity requirements.\nAlign product security governance with Corporate Quality workflows, new product development processes and product release governance.\nDefine security checkpoints for new products, new features and software releases.\nServe as an escalation point for complex product security classifications, threat scenarios, and interpretation questions.\nMaintain product security governance dashboards, maturity metrics, and executive reporting inputs.\nCoordinate with notified bodies, certification labs, and relevant industry associations and external partners, as needed.\n2. PSIRT & Vulnerability Management Governance\nDefine and govern product vulnerability management processes within the Product Security Office.\nEstablish governance frameworks for vulnerability intake, triage, validation, severity assessment, remediation coordination, disclosure, advisory publication, and regulatory reporting.\nGuide alignment of PSIRT practices with applicable international standards for vulnerability disclosure, handling and coordinated response.\nSupport consistent vulnerability handling across company-developed products, third-party components, open-source software, and supplier-provided software or IP.\nDefine escalation criteria for actively exploited vulnerabilities, critical product security incidents, supplier compromises, and customer-impacting issues.\nSupport CVE assignment and CNA-related activities, where applicable.\nEstablish metrics and KPIs for vulnerability handling, including intake volume, triage timeliness, remediation progress, advisory publication timelines, and overdue actions.\nPartner with Legal, Engineering, Customer Support, Field Applications, and Business Units to support coordinated handling of sensitive vulnerability cases.\n3. Threat Modeling & Product Risk Classification\nDefine and govern the enterprise framework for threat modeling and product risk classification within the Product Security Office.\nDevelop and maintain threat modeling templates, decision trees, risk libraries, and assessment criteria for use across Business Units.\nTrain and enable Business Unit security champions, product architects, and engineering teams on threat modeling methodologies.\nGuide the integration of threat modeling into product lifecycle and quality processes in partnership with Business Units.\nProvide guidance on the use of applicable threat intelligence, emerging attack techniques, and relevant frameworks such as MITRE ATT&CK, EMB3D, STRIDE, OWASP, IEC 62443-4-1, and ISO 21434.\nSupport product teams and security champions in complex threat modeling and product risk assessments, as needed.\nPromote consistent interpretation of product risk classifications across semiconductor product categories, including MCUs, MPUs, secure elements, firmware, software tools, development kits, and reference designs.\n4. Standards, Industry Engagement & External Representation\nMonitor and assess evolving cybersecurity regulations, standards, regulatory guidance, and industry expectations relevant to Microchip products.\nParticipate in, and help coordinate, Microchip engagement in relevant standards development organizations, industry consortia, and working groups in collaboration with Business Units and subject matter experts.\nSupport representation of Microchip's product security perspectives in relevant external cybersecurity and standards discussions.\nTranslate key developments from standards and regulatory discussions into actionable insights for internal governance, product security strategy, and compliance planning.\nRequirements/Qualifications:\nRequired Qualifications\nBachelor's or Master's degree in Electrical Engineering, Computer Science, Cybersecurity, Embedded Systems, or a related field.\n12.5+ years of experience in cybersecurity, product security, embedded security, semiconductor security, or related technical disciplines.\n5+ years of experience in product security governance, secure development lifecycle, security program management, or regulatory readiness roles.\n3+ years in a leadership or senior role driving cross-functional security initiatives across multiple teams or Business Units.\nStrong understanding of embedded systems, semiconductor products, firmware, software, hardware security, cryptography, and product lifecycle processes.\nExperience with the EU Cyber Resilience Act, RED cybersecurity requirements, NIS2, EUCC, SESIP, Common Criteria, or related cybersecurity regulatory frameworks.\nExperience with product security governance frameworks, threat modeling, risk assessment, vulnerability management, or PSIRT processes.\nFamiliarity with standards and frameworks such as IEC 62443, ISO 21434, OWASP, STRIDE, MITRE ATT&CK, EMB3D, or similar frameworks.\nExperience translating regulatory, customer, and standards requirements into practical engineering and governance processes.\nStrong stakeholder management skills across engineering, quality, legal, compliance, sales, field applications, and executive audiences.\nAbility to lead cross-functional initiatives and influence stakeholders across global Business Units without direct authority.\nStrong written and verbal communication skills, including executive reporting and customer-facing security communications.\nPreferred Qualifications\nExperience in semiconductor, embedded systems, industrial automation, automotive, IoT, medical, or security certification domains.\nExperience with threat modeling tools.\nExperience with SBOM tooling, CVE processes, CNA operations, vulnerability databases, and open-source vulnerability monitoring.\nExperience participating in standards bodies, working groups, industry associations, or regulatory consultations.\nExperience working with notified bodies, cybersecurity labs, certification bodies, or external assessors.\nProgram management experience, including KPI dashboards, governance cadence, cross-Business Unit execution tracking, and maturity models.\nTravel Time:\n0% - 25%Physical Attributes:\nHearing, Seeing, Talking, Works Alone, Works Around OthersPhysical Requirements:\nRegular business hours; 70% sitting, 15% standing, 15% walkingMicrochip Technology Incis an equal opportunity/affirmativeaction employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.\nFor more information on applicable equal employment regulations, please refer to the Know Your Rights: Workplace Discrimination is Illegal Poster.\nTo all recruitment agencies: Microchip Technology Inc. does not accept unsolicited agency resumes. Please do not forward resumes to our recruiting team or other Microchip employees. Microchip is not responsible for any fees related to unsolicited resumes.","description_format":"text","description_chars":10247,"description_truncated":false,"requirements":{"experience_years_min":13,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Processors, MCUs & AI Chips","Information Security","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-10-20T04:12:14Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.449,"p_room":0.28,"age_days":76,"expected_fill_days":28,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/microchip-technology-manager-product-security","json_url":"https://alion.io/job/microchip-technology-manager-product-security.json","meta":{"generated_at":"2026-10-22T20:07:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3970,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":44188},"rest":"https://alion.io/mcp/rest/get_company?id=44188"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmicrochip-technology-manager-product-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmicrochip-technology-manager-product-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmicrochip-technology-manager-product-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/microchip-technology-manager-product-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmicrochip-technology-manager-product-security"}]}