Embedded Security Architect — Threat Modeling & Secure SDLC

NXP Semiconductors; Glasgow; On-site; GBP 77,000 - 103,000; Full time

Benefits offered by this job

Home office

Flexible working time

Meal benefits

And more

Job summary

NXP Semiconductors in Austria is seeking an experienced Product Security Architect to design and defend secure embedded platforms across devices like ePassports, secure elements, and IoT.

You will lead security architecture, threat modeling, and collaboration with customers, certification bodies, and development teams to deliver certifiable security solutions throughout the product lifecycle. Strong C/C++ embedded software background and CC/EMVCo experience preferred.

Qualifications

• Master's or PhD in Cybersecurity, CS, SWE, Math, EE, or related field.
• Strong embedded software development experience in C/C++.
• Solid background in embedded security and secure system design.
• Experience with security architecture, threat analysis, or vulnerability assessments.
• Excellent communication and stakeholder management skills.

Responsibilities

• Define, review, and improve security architectures for embedded software, firmware, OS, and secure platforms.
• Perform threat modeling, risk assessments, and attack surface analysis.
• Investigate security vulnerabilities, identify root causes, and define countermeasures.
• Support security-by-design throughout the product lifecycle.
• Collaborate with customers, development teams, certification bodies, and security evaluation labs.
• Contribute to innovative security solutions for next-generation connected products.

Skills

C/C++

Embedded software

Security architecture

Threat modeling

Communication

Education

Master's or PhD in Cybersecurity, Computer Science, Software Engineering, Mathematics, Electrical Engineering, or related field

Job description

NXP Semiconductors in Austria is seeking an experienced Product Security Architect to design and defend secure embedded platforms across devices like ePassports, secure elements, and IoT.

You will lead security architecture, threat modeling, and collaboration with customers, certification bodies, and development teams to deliver certifiable security solutions throughout the product lifecycle. Strong C/C++ embedded software background and CC/EMVCo experience preferred.