Product Security Analyst (Vulnerability Operations Focus)

Category Engineering Hire Type Employee Job ID 18253 Remote Eligible No Date Posted 08/26/2026

We Are

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

You Are:

You are a technically grounded and operationally driven security professional with a passion for protecting products and customers through effective vulnerability management. You thrive in fast-paced environments where responsiveness, clarity, and precision matter, and you are energized by the challenge of managing security issues across a diverse product portfolio. 

You bring experience in Product Security Incident Response (PSIRT) and vulnerability coordination. At the same time, you are forward-thinking and excited about evolving toward a modern model—where scale, automation, andAI-driven accelerationtransform how vulnerabilities are managed and remediated.

You are comfortable operating independently, owning day-to-day vulnerability intake, triage, and remediation tracking, while actively engaging with engineering and product teams to ensure timely and effective resolution. You leverageAI agents and intelligent assistantsto augment your workflows—accelerating triage, enriching vulnerability context, generating insights, and reducing manual effort—while maintaining human oversight and making decisions.

You are detail-oriented and process-minded, yet adaptable enough to help shape new ways of working as PSIRT evolves to support rapid development cycles and emerging technologies, including frontier AI-models. You bring a pragmatic mindset, focusing on measurable risk reduction, continuous improvement, and operational scale. 

What You’ll Be Doing:

• Manage theend-to-end vulnerability lifecycle: intake, triage, validation, tracking, remediation, and disclosure.
• Operate within and help evolve processes ensuring consistency and quality in incident response. 
• Serve as aprimary point of contact for vulnerability coordination, working closely with product teams, engineering, legal, and communications.
• Performtechnical triage and risk assessment, including CVSS scoring, CWE assignment, and exploitability analysis.
• LeverageAI agents and assistantsto:
• Perform vulnerability intake normalization and deduplication 
• Enrich findings with threat intelligence, exploit data, and attack context 
• Generate initial triage summaries, severity recommendations, and remediation guidance 
• Assist in root cause analysis and pattern identification across vulnerabilities 
• Driveremediation effortsby partnering with product and engineering teams to ensure timely fixes and risk mitigation.
• Supportcoordinated vulnerability disclosure (CVD)processes with external researchers and stakeholders.
• Contribute to aVulnOps modelby improving prioritization, automation, and scalability of vulnerability handling.
• Assist in the development ofplaybooks, workflows, and AI-enabled toolingto support high-velocity security operations.
• Participate insecurity advisories and customer communications, leveraging automation to improve speed and consistency.
• Support incident response efforts forproduct-related security issuesas needed.
• Contribute to discussions onmodernizing PSIRT, including leveraging AI to support scale, speed, and frontier technologies.

The Impact You Will Have:

• Improve the organization’s ability toidentify, prioritize, and remediate vulnerabilities at speed and scale, powered by AI-assisted workflows.
• Reduce overallrisk exposure across the product portfoliothrough efficient, data-driven vulnerability management.
• Strengthencustomer trustthrough transparent, timely, and effective vulnerability handling.
• Enable engineering teams toaddress vulnerabilities faster and with clearer context.
• Driveoperational efficiency gains, reducing manual effort and improving consistency through AI augmentation.
• Contribute to afuture-ready PSIRT capabilitydesigned for high-velocity development and frontier AI-models.

What You’ll Need:

• Degree in Cybersecurity, Computer Science, Engineering, or related field (or equivalent experience). 
• 3–6 years of experiencein PSIRT or Product Security.
• Strong understanding ofvulnerability management processes and standards(e.g., CVSS, CWE, CVE, FIRST.org PSIRT Framework).
• Familiarity coordinated vulnerability disclosure practices and CVE Numbering Authority (CAN). 
• Exposure to or interest inAI/automation in security operations, including use of assistants, copilots, or workflow automation tools.
• Understanding ofcloud, SaaS, and modern application architectures(preferred).
• Experience withscripting, APIs, or data analysis(Python or similar) is a plus.
• Security certifications (e.g., OSCP, CEH, CSSLP) are a plus but not required. 

Who You Are:

• Aself-starterwho can operate independently and manage multiple workstreams effectively.
• Comfortable working alongsideAI-enabled tooling, using it to enhance productivity and decision-making.
• A strongcommunicator, able to translate security findings into actionable guidance.
• Detail-orientedwith a focus on accuracy, accountability, and follow-through.
• Aproblem solverwho can navigate ambiguity and make informed decisions quickly.
• Collaborative and approachable, with the ability tobuild relationships across teams.
• Adaptable and resilient infast-moving, evolving environments.
• Curious and forward-thinking, eager tohelp redefine PSIRT through VulnOps and AI-driven approaches.

The Team You’ll Be A Part Of:

You will join a forward-leaning Product Security team that is actively redefining how PSIRT operates in a modern, high-velocity environment. The team is evolving from traditional incident response toward aVulnerability Operations (VulnOps) model, leveragingAI agents, automation, and data-driven decision-makingto handle scale, speed, and complexity.

Working closely with Product Security, engineering, and cross-functional partners, you will play a key role inboth daily operations and the transformation of PSIRT. The team values ownership, innovation, and continuous improvement, and is committed to building ascalable, AI-augmented security programcapable of supporting next-generation and frontier technologies.

Rewards and Benefits

We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings. Your recruiter will provide more details about the salary range and benefits during the hiring process.

#LI-Hybrid

At Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability.