Remote PSIRT Engineer - Embedded & Semiconductor Security

NXP Semiconductors; Gratkorn; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Home office

Flexible working time

Meal benefits

More benefits

Job summary

NXP Semiconductors NV in Austria seeks a technical PSIRT member to analyze vulnerabilities across hardware, firmware, software, and embedded platforms. You will reproduce issues, assess exploitability, and draft remediation recommendations.

You will collaborate with product teams and researchers to validate findings, determine affected configurations, and document CVE records and advisories. Strong embedded/security experience and English fluency are essential.

Qualifications

• Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, or Secure Product Development.
• 3+ years of relevant work experience in a security related role.
• Bachelor’s/master’s degree in engineering – Computer Science, Electrical Engineering, Cybersecurity, or a related field.
• Strong experience in embedded security, hardware security, semiconductor security, firmware security, product security, or vulnerability research.
• Working knowledge of embedded architectures, microcontrollers, microprocessors, secure elements, firmware, boot chains, hardware security features, and low-level software.
• Ability to analyze vulnerability reports and reason about attack prerequisites, privilege boundaries, exploitability, and product impact.
• Experience with one or more relevant technical areas such as C/C++, assembly, reverse engineering, firmware analysis, secure boot, cryptography, debug interfaces, hardware‑assisted security, fault injection, or side‑channel analysis.
• Familiarity with vulnerability classification, CVE, CVSS, CWE, coordinated disclosure, and security advisory development.
• Experience in automotive, industrial, IoT, mobile, secure identification, connectivity, or communication‑infrastructure products is advantageous.
• Excellent collaboration and communication skills to work effectively with cross‑functional teams.
• Fluent in English

Responsibilities

• Analyze vulnerability reports and assess exploitability, scope, and customer impact.
• Reproduce issues with product teams and validate findings.
• Determine affected product families, configurations, versions, and usage scenarios.
• Document technical rationale for severity and remediation decisions.
• Prepare CVE records, security advisories, and researcher communications.
• Engage with researchers to clarify findings and validate disclosures.
• Advise teams on vulnerability patterns and security engineering improvements.
• Promote best practices in vulnerability management and PSIRT processes.
• Improve PSIRT processes, metrics, and operational excellence.
• Collaborate across product teams and security functions to reduce risk

Skills

Product security

Embedded security

C/C++

Reverse engineering

Firmware analysis

Vulnerability analysis

Low-level software

Security disclosure

Cross-functional collaboration

English fluency

Education

Bachelor’s/Master’s in Engineering

Job description

NXP Semiconductors NV in Austria seeks a technical PSIRT member to analyze vulnerabilities across hardware, firmware, software, and embedded platforms. You will reproduce issues, assess exploitability, and draft remediation recommendations.

You will collaborate with product teams and researchers to validate findings, determine affected configurations, and document CVE records and advisories. Strong embedded/security experience and English fluency are essential.