Infrastructure Cyber Defense Leader

Altera is seeking a technically capable Infrastructure Cyber Defense Leader to lead enterprise infrastructure security strategy, operations, and continuous improvement across network, cloud, on-premises, and hybrid technology environments. The role will oversee network security, cloud security, infrastructure protection, vulnerability management, security architecture, cyber resilience, and risk assessment activities. The successful candidate will help protect semiconductor design environments, operations, intellectual property, corporate systems, engineering platforms, and critical business services.

This position will work closely with Information Security, Infrastructure, Cloud, Network Engineering, IT Engineering, IT Operations, Compliance, Legal, Internal Audit, and business stakeholders. It is best suited for a hands‑on security leader who can translate enterprise risk into practical security controls, measurable outcomes, and resilient technology architectures.

Lead the strategy, operating model, and day-to-day execution of infrastructure defense capabilities across enterprise, cloud, data center, remote access, and engineering environments.

Establish security standards, operating procedures, control objectives, service-level expectations, and performance metrics for infrastructure security.

Assess infrastructure risks and prioritize remediation based on business criticality, exploitability, exposure, and potential impact to production, engineering, intellectual property, and customer commitments.

Develop and maintain infrastructure security roadmaps aligned to business priorities, technology strategy, threat intelligence, and applicable security frameworks.

Monitor operational performance, control effectiveness, open risks, exceptions, remediation commitments, and unresolved security gaps.

Identify opportunities to improve automation, visibility, control consistency, operational efficiency, and cyber resilience.

Oversee enterprise network security capabilities, including firewalls, secure web gateways, intrusion prevention, network segmentation, remote access, DNS security, DDoS protection, and network monitoring.

Partner with Network Engineering to design and implement secure connectivity across corporate, cloud, data center, engineering and third-party environments.

Improve segmentation and access controls for sensitive semiconductor design assets, production systems, engineering networks, and high-value intellectual property.

Review network security configurations, rule sets, architecture changes, and exceptions to ensure alignment with approved standards.

Establish measurable improvements in network visibility, control coverage, policy hygiene, and response readiness.

Support investigation and remediation of network-based threats, misconfigurations, unauthorized access, and control failures.

Lead security architecture, governance, and operational control implementation across Microsoft Azure, Amazon Web Services, and hybrid cloud environments.

Define and enforce cloud security standards for identity, access management, network controls, encryption, logging, monitoring, secrets management, workload protection, and data security.

Oversee security posture management and remediation activities across Azure and AWS accounts, subscriptions, landing zones, and cloud workloads.

Partner with Cloud Engineering and Dev Ops teams to integrate security into infrastructure‑as‑code, CI/CD pipelines, container platforms, serverless services, and platform engineering practices.

Improve cloud detection, logging, configuration compliance, vulnerability visibility, and incident response…