Principal Product Security Program Leader

AMD
San Jose
Workplace: HybridFull timeUSD 210,000 - 360,000 annuallyFunction: Administration & Executive AssistanceSkills: ["Leadership","Executive communication","Cross-functional partnership","Vulnerability triage","Threat modeling"]

Own product security governance for AMD’s Adaptive & Embedded Computing business unit, coordinating vulnerability response, secure development lifecycle (SDL) health, threat modeling, and remediation progress. Lead incident response for high-severity and active exploit reports, partner with AMD’s Product Security Office and embedded security experts across silicon, firmware, and tooling, and translate EU Cyber Resilience Act and GDPR requirements into engineering and customer-facing assessments.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
AMD
AMD
2 days ago

Principal Product Security Program Leader

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Own product security governance for AMD’s Adaptive & Embedded Computing business unit, coordinating vulnerability response, secure development lifecycle (SDL) health, threat modeling, and remediation progress. Lead incident response for high-severity and active exploit reports, partner with AMD’s Product Security Office and embedded security experts across silicon, firmware, and tooling, and translate EU Cyber Resilience Act and GDPR requirements into engineering and customer-facing assessments.
Location: San Jose
Workplace: Hybrid
Employment Type: Full time
Job Function: Administration & Executive Assistance

Key Responsibilities

  • •Own product security governance for the business unit as the primary interface to the Product Security Office on vulnerability management, SDL health, and remediation progress.
  • •Coordinate vulnerability response across embedded security experts to triage and resolve reports from researchers, internal teams, and customers.
  • •Maintain and evolve the security threat model for AMD’s adaptive-computing design tools.
  • •Partner with Legal and Compliance to align with EU Cyber Resilience Act and GDPR requirements, including SBOM and vulnerability disclosure obligations.
  • •Serve as incident lead for high-severity vulnerabilities and active exploit reports, driving timely resolution and coordinated disclosure with partners and customers.

Pay and Benefits

Salary: USD 210,000 - 360,000 annually

Key Requirements

  • •Expert-level product security, PSIRT, or Security Design Lifecycle leadership experience in semiconductor, EDA software, embedded systems, or a comparable industry; FPGA/adaptive computing experience is a plus.
  • •Experience leading PSIRT or product coordinated vulnerability disclosure (CVD) programs, including triage, CVSS scoring, CVE assignment, and coordinated disclosure with hyperscalers, OEMs, and researchers.
  • •Working expertise with SAST tooling (Coverity, CodeQL) and SCA/SBOM tooling (Black Duck, SPDX, CycloneDX), plus threat modeling and secure SDLC frameworks (ISO/SAE 21434, NIST SSDF).
  • •Demonstrated familiarity with the EU Cyber Resilience Act (CRA) and GDPR, and the ability to translate regulatory requirements into engineering actions.
  • •Experience partnering with Legal/Compliance teams on regulated disclosures and customer-facing security assessments; strong executive communication skills.
Experience:SemiconductorEDAEmbedded systemsAdaptive computingProduct securityPSIRTSecurity vulnerability disclosure
Skills:LeadershipExecutive communicationCross-functional partnershipVulnerability triageThreat modeling
Certifications:CISSPCISMCSSLP
Languages:En-us
Tech Stack:CoverityCodeQLBlack DuckSPDXCycloneDXISO/SAE 21434NIST SSDFGDPREU Cyber Resilience Act (CRA)SASTSCASBOMThreat modeling

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

AMD
Designs and produces semiconductor products including CPUs, GPUs, and adaptive SoCs for consumer, enterprise, and embedded markets, competing across PCs, data centers, and gaming industries.
Industry: Electronics Manufacturing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Santa Clara, United States
Founded: 1969
Glassdoor
Glassdoor: 3.9
WebsiteLinkedIn