Vulnerability Management Analyst — Semiconductor IP

You are a Vulnerability Management Analyst - Semiconductor IP at Synopsys, a leading company in Electronic Design Automation (EDA).

Your critical role involves analyzing vulnerabilities affecting semiconductor IP products, firmware, and related interfaces. You will determine residual risk, prioritize findings, and work with design, verification, firmware, and product teams to explain vulnerabilities and agree on mitigations.

Key responsibilities include:

• Analyzing vulnerabilities and determining residual risk
• Prioritizing findings for timely action by product teams
• Collaborating with teams to explain vulnerabilities and implement mitigations
• Advising on practical mitigations and verification evidence
• Building and maintaining analysis tools using Python
• Tracking open risk throughout the cybersecurity lifecycle
• Facilitating working sessions for consistent analysis and risk language
• Seeking new ways to detect, assess, and mitigate risk

Requirements:

• Bachelor's degree in electrical engineering, computer engineering, computer science, cybersecurity, or a related field
• Typically 3+ years in vulnerability management, product cybersecurity, or a closely related engineering role
• Strong practical experience in vulnerability analysis on real products
• Ability to determine risk and explain vulnerabilities to engineering teams
• Working familiarity with semiconductor IP development and associated testing
• Experience with Python for building analysis tools
• Understanding of embedded systems and hardware-rooted vulnerabilities
• Familiarity with AI agents and agentic workflows
• Hands-on use of Jira, Confluence, Git, and GitLab

Benefits:

• Comprehensive health, wellness, and financial benefits
• Competitive salaries
• ESPP
• Retirement plans
• Maternity and paternity leave
• Adoption and surrogacy assistance