Software Security Architect - CRA (m/f/d)

NXP Semiconductors; Gratkorn; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

home office

flexible working time

meal benefits

and more

Zusammenfassung

NXP Semiconductors in Austria seeks a Software Security Architect to embed security across product lifecycles. You will design robust architectures, assess risks, and collaborate with product teams, security experts and stakeholders to meet regulatory requirements including CRA.

We value a strong background in embedded software, threat modelling, and cryptographic concepts, plus the ability to navigate global cross-functional environments.

Qualifikationen

• Master's degree, PhD, or equivalent in Computer Science, Cybersecurity, Software Engineering, Electronics, Mathematics, or related field.
• Strong background in cybersecurity and software security architecture.
• Extensive experience in embedded software development using C, Rust, and/or assembly language.
• Understanding of SoC software stacks, middleware, firmware, operating systems, and applications.
• Experience with threat modelling, security risk assessment, and secure system design.
• Familiarity with security technologies such as: Secure Boot, Cryptography and Key Management, Device Identity and Root of Trust, Firmware Protection, Secure Update Mechanisms.
• Familiarity with cybersecurity regulations, standards, and certification schemes applicable to embedded and connected products.
• Strong analytical skills and ability to address complex system-level security challenges.
• Experience or interest in AI security is a plus.
• Independent working style with a willingness to listen, learn, and adapt.
• Excellent communication and stakeholder management skills.
• Strong team player with the ability to work effectively in global and cross-functional environments.

Aufgaben

• Specify, design, review, and evolve system software security architectures and implementations.
• Conduct threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.
• Define security requirements and establish traceability from security objectives to implementation and verification activities.
• Integrate security-by-design principles throughout the complete product lifecycle.
• Support secure development lifecycle (SDL) activities, including architecture reviews, security assessments, and security verification.
• Analyze security vulnerabilities and defects, perform root cause analysis, and define appropriate mitigations and countermeasures.
• Define and review security mechanisms such as secure boot, secure update, cryptographic services, key management, device identity, and root-of-trust solutions.
• Translate cybersecurity standards, regulatory requirements, and industry best practices into practical engineering requirements and architectures.
• Support compliance activities related to product security regulations and standards, including the Cyber Resilience Act (CRA), through security documentation, evidence generation, and risk management activities.
• Drive adoption of security best practices across project teams and product lines.
• Serve as a technical interface to customers, evaluation labs, compliance experts, and product development teams.
• Contribute to the continuous improvement of NXP's product security methodologies, frameworks, and processes.

Kenntnisse

Embedded software

Security architecture

Threat modelling

Security risk assessment

Cryptography & key management

Secure boot & updates

Regulatory compliance (CRA/standards)

System-level security

Stakeholder management

AI security (nice-to-have)

Ausbildung

Master's/PhD in CS/Cybersecurity/related field

Jobbeschreibung

Introducing a Key Role in Security Architecture

Join one of the largest industrial security teams and build technology that protects real devices, worldwide. At NXP’s Competence Center Crypto & Security, we design, build, and deliver end-to-end security — from innovation to architecture to products in the field. If you’re a security engineer who wants impact, on real life security solutions, we’d love to hear from you. Our Chief Technology Office (CTO) organization drives innovation across NXP and supports Business Units with the tools, knowledge, and processes required to create secure products for our customers. The Security Architecture Team within the Competence Center Crypto & Security (CC CS) plays a key role in enabling secure products across the Automotive, Industrial, IoT, Mobile, and Edge Processing markets.

Your Role

Join our team and support product development teams in gathering requirements, specifying, designing, reviewing, verifying, and implementing security solutions for NXP products. As a Software Security Architect, you will help ensure that security is built into products throughout their entire lifecycle. You will collaborate with product teams, security experts, and stakeholders across the company to develop robust security architectures, assess security risks, and support compliance with relevant cybersecurity standards and regulations, including the Cyber Resilience Act (CRA).

Responsibilities

• Specify, design, review, and evolve system software security architectures and implementations.
• Conduct threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.
• Define security requirements and establish traceability from security objectives to implementation and verification activities.
• Integrate security-by-design principles throughout the complete product lifecycle.
• Support secure development lifecycle (SDL) activities, including architecture reviews, security assessments, and security verification.
• Analyze security vulnerabilities and defects, perform root cause analysis, and define appropriate mitigations and countermeasures.
• Define and review security mechanisms such as secure boot, secure update, cryptographic services, key management, device identity, and root-of-trust solutions.
• Translate cybersecurity standards, regulatory requirements, and industry best practices into practical engineering requirements and architectures.
• Support compliance activities related to product security regulations and standards, including the Cyber Resilience Act (CRA), through security documentation, evidence generation, and risk management activities.
• Drive adoption of security best practices across project teams and product lines.
• Serve as a technical interface to customers, evaluation labs, compliance experts, and product development teams.
• Contribute to the continuous improvement of NXP's product security methodologies, frameworks, and processes.

Profile

• Master's degree, PhD, or equivalent experience in Computer Science, Cybersecurity, Software Engineering, Electronics, Mathematics, or a related technical field.
• Strong background in cybersecurity and software security architecture.
• Extensive experience in embedded software development using C, Rust, and/or assembly language.
• Strong understanding of SoC software stacks, middleware, firmware, operating systems, and applications.
• Experience with threat modelling, security risk assessment, and secure system design.
• Familiarity with security technologies such as: Secure Boot Cryptography and Key Management Device Identity and Root of Trust Firmware Protection Secure Update Mechanisms.
• Familiarity with cybersecurity regulations, standards, and certification schemes applicable to embedded and connected products.
• Strong analytical skills and ability to address complex system-level security challenges.
• Experience or interest in AI security is a plus.
• Independent working style with a willingness to listen, learn, and adapt.
• Excellent communication and stakeholder management skills.
• Strong team player with the ability to work effectively in global and cross-functional environments.

Preferred Qualifications

• Experience in one or more of the following areas is highly desirable: Security architecture for automotive, industrial, or IoT products.
• Product security regulations and compliance frameworks, including the Cyber Resilience Act (CRA).
• Secure Development Lifecycle (SDL) practices.
• Security certification frameworks such as PSA Certified, SESIP, or Common Criteria.
• Vulnerability management, penetration testing, or security assessments.
• Hardware/software security co-design.
• Artificial Intelligence and AI security.
• Creating Secure Connections and Infrastructure for a Smarter World

Creating Secure Connections and Infrastructure for a Smarter World NXP Semiconductors N.V. (NASDAQ: NXPI) makes products and environments safer, more sustainable, and more secure with innovative connectivity and edge processing solutions for a smarter world.

We are in the business of better. Not just better technologies, but better innovations to improve society.

As the world leader in secure connectivity and processing solutions for embedded applications, NXP is solving the world’s most complex technology challenges to accelerate business innovation, enhance how we work, and advance how we live.

Ready to create a smarter world? Visit our career website and follow us on social: LinkedIn, Facebook, and X.

To learn more bout our products visit our showroom here.

Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.

For applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung“, this position (fulltime) is graded in Employment Group V after 6 years. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.

• home office
• flexible working time
• meal benefits
• and more

More information about NXP in Austria... NXP Semiconductors N.V. (NASDAQ: NXPI) enables a smarter, safer, and more sustainable world through innovation. As the world leader in secure connectivity solutions for embedded applications, NXP is pushing boundaries in the automotive, industrial & IoT, mobile, and communication infrastructure markets. For more information, visit www.nxp.com Bright Minds. Bright Futures. We believe that a key component to growing our business is to develop our people. To enable you grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills. Commitment At NXP. We recognize NXP is a powerful change agent as we continue to deliver innovative solutions that advance a more sustainable future. We remain steadfast in our commitment to sustainability and making measurable year-on-year progress. Also, we aim to create an inclusive work environment and we will not tolerate racism, discrimination or harassment of any kind. We have programs in place focused on diversity, inclusion and equality. Thank you for considering a career at NXP. To help you prepare for the different steps in our hiring process, see the following useful advice and tips.