Embedded Software Security Architect for Secure Lifecycle

NXP Semiconductors N.V.; Österreich; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Home office benefits

Flexible working time

Meal benefits

Job summary

NXP Semiconductors N.V. in Austria is seeking a Software Security Architect to embed security across product lifecycles.

You will collaborate with product teams, security experts, and stakeholders to develop robust security architectures, assess risks, and support compliance with cybersecurity standards, including CRA. You will specify and evolve security architectures for embedded systems, perform threat modelling, and drive secure development lifecycle practices across projects, while

Qualifications

• Master's degree, PhD, or equivalent in Computer Science, Cybersecurity, Software Engineering, Electronics, Mathematics, or related field.
• Strong background in cybersecurity and software security architecture.
• Extensive experience in embedded software development using C, Rust, and/or assembly language.
• Strong understanding of SoC software stacks, middleware, firmware, OSes, and applications.
• Experience with threat modelling, security risk assessment, and secure system design.
• Familiarity with security technologies such as: Secure Boot; Cryptography and Key Management; Device Identity and Root of Trust; Firmware Protection; Secure Update Mechanisms.
• Familiarity with cybersecurity regulations, standards, and certification schemes for embedded/connected products.
• Strong analytical skills and ability to address complex system-level security challenges.
• Experience or interest in AI security is a plus.
• Independent working style and adaptability.
• Excellent communication and stakeholder management skills.
• Strong team player with ability to work globally and cross-functionally.

Responsibilities

• Specify, design, review, and evolve system software security architectures and implementations.
• Conduct threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.
• Define security requirements and establish traceability from security objectives to implementation and verification activities.
• Integrate security-by-design principles throughout the product lifecycle.
• Support SDL activities, including architecture reviews, security assessments, and verification.
• Analyze security vulnerabilities and defects, perform root cause analysis, and define mitigations.
• Define and review security mechanisms such as secure boot, secure update, cryptographic services, key management, device identity, and root-of-trust.
• Translate cybersecurity standards and regulatory requirements into engineering requirements and architectures.
• Support compliance activities related to product security regulations, including CRA, through documentation and risk management.
• Drive adoption of security best practices across teams.
• Serve as technical interface to customers, evaluation labs, compliance experts, and product teams.
• Contribute to continuous improvement of product security methodologies.

Skills

Embedded software development (C, Rust

Cybersecurity & security architecture

Threat modelling & risk assessment

Security mechanisms (secure boot, key,

Education

Master’s or PhD in a related field

Tools

PSA Certified

Common Criteria

SESIP

Job description

NXP Semiconductors N.V. in Austria is seeking a Software Security Architect to embed security across product lifecycles.

You will collaborate with product teams, security experts, and stakeholders to develop robust security architectures, assess risks, and support compliance with cybersecurity standards, including CRA. You will specify and evolve security architectures for embedded systems, perform threat modelling, and drive secure development lifecycle practices across projects, while