Head of Application Security

About the role

Analog Devices, a global semiconductor leader, is looking for a Head of Application Security, a senior leadership role reporting to the Chief Information Security Officer (CISO). The leader protects the software, AI and products at the heart of ADI's business, making security a competitive advantage for automotive, aerospace and defense, healthcare and industrial customers. The role covers three priorities: application security embedded in the DevOps/CI-CD environment, a risk-managed AI security program starting with generative AI and LLM governance, and a company-wide product security practice.

Key responsibilities

• Build and mature a secure SDLC (DevSecOps) with SAST, SCA, DAST and secret scanning, and harden the software supply chain, CI/CD pipelines and build systems, driving SBOM generation and trusted publishing.
• Define and run an AI security and governance program aligned to frameworks such as NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10 and MITRE ATLAS, covering generative AI, LLM controls and agentic AI use cases.
• Grow a product security practice anchored to a secure product development lifecycle standard (e.g. IEC 62443-4-1) and embedded in the NPI process, owning the PSIRT, coordinated vulnerability disclosure, CVE/CVSS practice and SBOM/HBOM strategy.
• Advise the CISO, executive leadership and the Board, and integrate security risk into the enterprise risk model with cross-functional governance.
• Lead response to significant security incidents, including regulatory engagement and external communications.
• Build and lead a multidisciplinary team, recruit and retain security talent, and promote a security-by-design culture with measurable coverage and risk-burndown reporting.
• Align security to regulatory and customer requirements in automotive, aerospace and defense, healthcare and industrial markets, and support audits and attestations.

Required profile

• Bachelor's degree, preferably in Engineering, Computer Science, Cybersecurity or a related field (or equivalent experience).
• 15+ years of progressive cybersecurity experience, including a senior security leadership role in a large, complex environment.
• Proven experience building and scaling security functions in large global engineering organizations.
• Ideal: advanced degree and certifications such as CISSP or CISM; experience in semiconductor, electronics or regulated industries; experience in export-controlled environments; experience setting up a new security function from the ground up; experience supporting Board-level communications.

Required skills

• Deep expertise in secure SDLC / DevSecOps and automated security testing in CI/CD pipelines, with software supply-chain security and threat modeling.
• Working knowledge of AI/GenAI security frameworks and controls, and of product security, PSIRT, SBOM and vulnerability disclosure.
• Ability to translate complex technical risk into business terms (e.g. FAIR or equivalent) and communicate to executives and the Board.

What we offer

• Expected wage range of $219,200 to $301,400, with a discretionary performance-based bonus.
• Medical, vision and dental coverage, 401k, paid vacation, holidays and sick time.
• 10% travel and first-shift days.