Product Security Incident Response Lead - Remote & Flexible Hours

NXP Semiconductors; Gratkorn; Presencial; EUR 75.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Home office

Flexible working time

Meal benefits

Descripción de la vacante

As a member of NXP's Product Security Incident Response Team in Austria, you will lead the operational response to reported vulnerabilities affecting NXP hardware and software products. You will own and drive security cases from intake through assessment, remediation coordination, customer communication, and responsible disclosure.

This program leadership role focuses on case management, stakeholder coordination, communication, and continuous improvement.

Formación

• Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, vulnerability management or technical engineering programs.
• 3+ years of relevant work experience.
• Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
• Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.
• Demonstrated ability to coordinate complex investigations involving multiple technical and business organizations.
• Strong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting.
• Excellent communication skills and a passion for protecting innovative technology at scale.
• Familiarity with embedded products, semiconductor products, firmware, automotive, industrial, or IoT environments is advantageous.
• PMP, PgMP, Scrum Master, SAFe, or other project/program management certifications are preferred, but not required.
• Fluent in English

Responsabilidades

• Own the operational lifecycle of vulnerability cases from intake through closure and disclosure.
• Establish the response plan, milestones, ownership, dependencies, escalation path, and communication cadence for each case.
• Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing organizations.
• Track decisions, evidence, approvals, outstanding actions, and delivery risks.
• Facilitate vulnerability review meetings and drive actions to completion.
• Coordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and external organizations.
• Manage CVE reservation and publication workflows with technical SMEs.
• Coordinate creation, review, approval, and publication of security advisories and customer communications.
• Improve PSIRT procedures, templates, governance, and audit readiness.
• Support readiness for upcoming regulations such as the EU Cyber Resilience Act (CRA), future standards and vulnerability-reporting obligations.

Conocimientos

Product Security

Embedded Security

Semiconductor Security

Cybersecurity

Vulnerability Management

Technical Engineering

Descripción del empleo

As a member of NXP's Product Security Incident Response Team in Austria, you will lead the operational response to reported vulnerabilities affecting NXP hardware and software products. You will own and drive security cases from intake through assessment, remediation coordination, customer communication, and responsible disclosure.

This program leadership role focuses on case management, stakeholder coordination, communication, and continuous improvement.