Senior Embedded Security Vulnerability Analyst (m/f/d)

NXP Semiconductors; Gratkorn; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Home office

Flexible working time

Meal benefits

Zusammenfassung

NXP Semiconductors is seeking a Senior Embedded Security Vulnerability Analyst to perform deep technical analysis at the hardware/software boundary. You will study firmware, boot code, and system components to identify weaknesses, drive secure designs, and work with development teams to implement mitigations.

Responsibilities include analyzing boot flows, conducting root-cause analysis, and supporting certifications.

Qualifikationen

• Degree in electrical engineering, computer science, maths or related field.
• Strong understanding of low-level system behavior (memory, interrupts, privileges).
• Experience in vulnerability research, reverse engineering, or exploit development.
• Familiarity with static and dynamic analysis tools, fuzzing, or symbolic execution.
• Experience with debugging interfaces (JTAG, GDB).
• Rust experience or memory-safe design interest.

Aufgaben

• Perform in-depth vulnerability analysis of embedded software (bare-metal, RTOS, trusted execution environments).
• Analyze boot flows, privilege boundaries, and security-critical components (crypto libraries, key handling, isolation).
• Conduct root cause analysis and assess exploitability and impact of weaknesses.
• Support security certifications and evaluations (PSA, SESIP, Common Criteria).
• Analyze PSIRT incidents and derive structural improvements.
• Develop and apply analysis methodologies and tooling (static/dynamic analysis, scripting).
• Apply AI-assisted techniques for code analysis and vulnerability discovery (LLM workflows).
• Design workflows that combine traditional analysis with AI-assisted approaches.
• Research and evaluate emerging attack techniques in embedded systems.
• Collaborate with development teams to translate findings into mitigations.

Kenntnisse

C programming

ARM/RISC-V

Assembly debugging

Vulnerability research

AI-assisted analysis

Static analysis

Dynamic analysis

Scripting

Ausbildung

Electrical Engineering degree

Computer Science degree

Mathematics degree

Tools

GDB

JTAG

Fuzzing tools

Symbolic execution

Jobbeschreibung

We are seeking a Senior Embedded Security Vulnerability Analyst to perform deep technical analysis of embedded systems, focusing on identifying and understanding vulnerabilities at the hardware/software boundary. You will analyze low-level firmware, boot code, and system components to uncover exploitable weaknesses and work closely with development teams to drive secure designs. The role requires a strong systems mindset, curiosity for attack techniques, and the ability to reason about complex execution environments. You will also leverage and help shape modern analysis approaches, including AI‑assisted vulnerability discovery workflows, to improve both depth and scalability of analysis. If you are already exploring how LLMs and agentic workflows can augment deep code and system analysis, this role provides an opportunity to apply and advance these approaches in a real‑world embedded security setting. We welcome both: experienced security researchers strong embedded engineers with a demonstrated interest in transitioning into security.

Your Responsibilities

• Perform in-depth vulnerability analysis of embedded software (bare-metal, RTOS, trusted execution environments)
• Analyze boot flows, privilege boundaries, and security‑critical components (e.g., crypto libraries, key handling, isolation mechanisms)
• Conduct root cause analysis and assess exploitability and impact of identified weaknesses
• Support security certifications and evaluations (e.g., PSA, SESIP, Common Criteria)
• Analyze PSIRT incidents and derive structural improvements
• Develop and apply analysis methodologies and tooling (static analysis, fuzzing, scripting, automation)
• Apply and evaluate AI‑assisted techniques for code analysis and vulnerability discovery (e.g., LLM‑based workflows)
• Design and refine workflows that combine traditional analysis (static and dynamic) with AI‑assisted approaches
• Research and evaluate emerging attack techniques relevant to embedded systems
• Collaborate with development teams to translate findings into concrete mitigations

Education & Qualifications

• Degree in Electrical Engineering, Computer Science, Mathematics, or related field
• Strong understanding of low‑level system behavior (memory layout, interrupts, privilege levels, concurrency)
• Solid experience in C programming; familiarity with ARM and/or RISC‑V architectures
• Experience with assembly‑level debugging and analysis
• Strong differentiators: Experience with vulnerability research, reverse engineering, or exploit development
• Familiarity with static and dynamic analysis tools, fuzzing, or symbolic execution
• Understanding of common vulnerability classes (memory corruption, logic flaws, side channels)
• Experience with debugging interfaces (e.g., JTAG, trace, GDB)
• Experience using or evaluating AI‑assisted code analysis or vulnerability discovery tools
• Experience building or integrating automated analysis workflows (e.g., scripting, pipelines, agent‑based approaches)
• Rust experience or interest in memory‑safe system design

Your Profile

• Strong analytical thinking and curiosity for how systems fail under adversarial conditions
• Ability to work independently and drive complex technical investigations
• Interest in combining deep technical analysis with modern AI‑assisted techniques
• Clear communication of technical findings and risks to diverse audiences
• Collaborative mindset when working with development and architecture teams

Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.

For applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung”, this position (fulltime) is graded in Employment GroupV. Your individual experiences and expectations will be considered in the application process.

Our benefits include:

• home office
• flexible working time
• meal benefits

More information about NXP in Austria…

NXP Semiconductors N.V. (NASDAQ: NXPI) enables a smarter, safer, and more sustainable world through innovation. As the world leader in secure connectivity solutions for embedded applications, NXP is pushing boundaries in the automotive, industrial & IoT, mobile, and communication infrastructure markets. For more information, visit www.nxp.com.

Bright Minds. Bright Futures.

We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills.

Commitment At NXP

We recognize NXP is a powerful change agent as we continue to deliver innovative solutions that advance a more sustainable future. We remain steadfast in our commitment to sustainability and making measurable year‑on‑year progress. Also, we aim to create an inclusive work environment and we will not tolerate racism, discrimination or harassment of any kind. We have programs in place focused on diversity, inclusion and equality.

Thank you for considering a career at NXP.

Thank you for your understanding.