Product Security Vulnerability Response Manager - Embedded & Semiconductor Security (m/f/d)

NXP Semiconductors; Gratkorn; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Home office

Flexible working time

Meal benefits

Zusammenfassung

NXP Semiconductors in Austria leads product security for deployed devices across automotive, industrial, and IoT markets. You will drive end-to-end vulnerability management from disclosure through mitigation and customer communications, coordinating with engineering, R&D and field teams.

You will influence product teams, oversee CVE processes, and continuously improve PSIRT practices to protect customers and strengthen trust in NXP technologies.

Qualifikationen

• Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, or Secure Product Development.
• Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
• Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.

Aufgaben

• Lead the response and coordination of security vulnerabilities affecting NXP products, hardware and software.
• Drive vulnerability triage, impact assessment, severity classification, and prioritization.
• Collaborate with engineering and product teams to develop mitigation strategies and remediation plans.
• Coordinate responsible disclosure activities with external researchers, customers, and industry partners.
• Oversee security advisories, CVE processes, and customer communications.
• Act as a trusted advisor to product teams on vulnerability management and product security best practices.
• Continuously improve PSIRT processes, metrics, and operational excellence.

Kenntnisse

Product Security

Embedded Security

Cybersecurity

Secure Product Development

Threat Intelligence

Cross-functional Influence

Jobbeschreibung

This role is about ensuring the resilience NXP products (Secure Chips rather then IT Systems) who are are embedded in millions of automotive, industrial, IoT, mobile, and edge devices.

In this role, you will help protect products already deployed in the field, leading the response to security vulnerabilities, coordinating mitigation strategies, and strengthening customer trust throughout the post-production product lifecycle.

Working at the intersection of Product Security, Engineering, R&D, Customers, and External Security Researchers, you will drive the end-to-end lifecycle of vulnerability management, from initial disclosure through risk assessment, mitigation, and customer communication.

As a key member of NXP's Product Security Incident Response Team (PSIRT), you will lead the end-to-end response to security issues affecting NXP products already deployed worldwide. Partnering with engineering teams, customers, and security researchers, you will assess risk, coordinate remediation efforts, manage responsible disclosure, and help safeguard customer trust throughout the product lifecycle.

Our PSIRT is committed to rapidly addressing security threats in NXP products by investigating reported issues, evaluating their potential impact, and providing customers with timely and actionable guidance.

See also www.nxp.com/psirt .

What you'll do

What you'll do: A snapshot of your key responsibilities and impact.

• Lead the response and coordination of security vulnerabilities affecting NXP products, hardware and software.
• Drive vulnerability triage, impact assessment, severity classification, and prioritization.
• Collaborate with engineering and product teams to develop mitigation strategies and remediation plans.
• Coordinate responsible disclosure activities with external researchers, customers, and industry partners.
• Oversee security advisories, CVE processes, and customer communications.
• Act as a trusted advisor to product teams on vulnerability management and product security best practices.
• Continuously improve PSIRT processes, metrics, and operational excellence.

What you'll bring

• Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, or Secure Product Development.
• Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
• Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.
• Excellent communication skills and a passion for protecting innovative technology at scale.

Understand Threats. Protect Products. Protect Customers. Lead Response. Reduce Risk. Build Trust. Drive Security. Create Impact. Shape Tomorrow.

For Austrian applicants

For Austrian applicants: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) "Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung", this position (fulltime) is graded in Employment Group V. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.

More information about NXP in Austria...