Senior Embedded Security Analyst: AI-Driven Vulnerability Research

NXP Semiconductors; Gratkorn; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

home office

flexible working time

meal benefits

Zusammenfassung

NXP Semiconductors is seeking a Senior Embedded Security Vulnerability Analyst to perform deep technical analysis of embedded systems, focusing on vulnerabilities at the hardware/software boundary. You will examine firmware, boot code, and system components to uncover weaknesses and drive secure designs.

You will leverage AI‑assisted vulnerability discovery and shape modern analysis workflows across static, dynamic, and AI‑augmented methods, collaborating with development teams to translate

Qualifikationen

• Degree in Electrical Engineering, Computer Science, Mathematics, or related field.
• Strong understanding of low‑level system behavior (memory layout, interrupts, privilege levels, concurrency).
• Solid experience in C programming; familiarity with ARM and/or RISC‑V architectures.
• Experience with assembly‑level debugging and analysis.
• Strong differentiators: experience with vulnerability research, reverse engineering, or exploit development.
• Familiarity with static and dynamic analysis tools, fuzzing, or symbolic execution.
• Understanding of common vulnerability classes (memory corruption, logic flaws, side channels).
• Experience with debugging interfaces (e.g., JTAG, trace, GDB).
• Experience using or evaluating AI‑assisted code analysis or vulnerability discovery tools.
• Experience building or integrating automated analysis workflows (e.g., scripting, pipelines, agent‑based approaches).
• Rust experience or interest in memory‑safe system design.

Aufgaben

• Perform in-depth vulnerability analysis of embedded software (bare-metal, RTOS, trusted execution environments).
• Analyze boot flows, privilege boundaries, and security‑critical components (e.g., crypto libraries, key handling, isolation mechanisms).
• Conduct root cause analysis and assess exploitability and impact of identified weaknesses.
• Support security certifications and evaluations (e.g., PSA, SESIP, Common Criteria).
• Analyze PSIRT incidents and derive structural improvements.
• Develop and apply analysis methodologies and tooling (static analysis, fuzzing, scripting, automation).
• Apply and evaluate AI‑assisted techniques for code analysis and vulnerability discovery (e.g., LLM‑based workflows).
• Design and refine workflows that combine traditional analysis (static and dynamic) with AI‑assisted approaches.
• Research and evaluate emerging attack techniques relevant to embedded systems.
• Collaborate with development teams to translate findings into concrete mitigations.

Kenntnisse

Embedded security

Low-level systems

C programming

ARM/RISC-V

Assembly debugging

Static/dynamic analysis

Fuzzing

Symbolic execution

AI-assisted analysis

Automation scripting

Rust memory-safety

Ausbildung

Electrical Engineering / Computer Science / Mathematics

Tools

GDB

JTAG

Trace

Static Analysis Tools

Fuzzing Tools

Symbolic Execution Tools

ARM

RISC-V

Jobbeschreibung

NXP Semiconductors is seeking a Senior Embedded Security Vulnerability Analyst to perform deep technical analysis of embedded systems, focusing on vulnerabilities at the hardware/software boundary. You will examine firmware, boot code, and system components to uncover weaknesses and drive secure designs.

You will leverage AI‑assisted vulnerability discovery and shape modern analysis workflows across static, dynamic, and AI‑augmented methods, collaborating with development teams to translate