PSIRT Vulnerability Response Lead for Embedded Security

NXP Semiconductors; Glasgow; On-site; GBP 70,000 - 120,000; Full time

Benefits offered by this job

Home office

Flexible working time

Meal benefits

Job summary

NXP Semiconductors in the United Kingdom is seeking a Product Security Incident Response professional to lead end-to-end vulnerability management for deployed products. You will coordinate triage, risk assessment, and remediation with engineering, product teams and external researchers.

You will influence cross-functional partners, communicate advisories, and drive best practices to protect customers and maintain trust throughout the product lifecycle.

Qualifications

• Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, or Secure Product Development.
• Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
• Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.

Responsibilities

• Lead the response and coordination of security vulnerabilities affecting NXP products, hardware and software.
• Drive vulnerability triage, impact assessment, severity classification, and prioritization.
• Collaborate with engineering and product teams to develop mitigation strategies and remediation plans.
• Coordinate responsible disclosure activities with external researchers, customers, and industry partners.
• Oversee security advisories, CVE processes, and customer communications.
• Act as a trusted advisor to product teams on vulnerability management and product security best practices.
• Continuously improve PSIRT processes, metrics, and operational excellence.

Skills

Product Security

Embedded Security

Semiconductor Security

Cybersecurity

Secure Product Development

Job description

NXP Semiconductors in the United Kingdom is seeking a Product Security Incident Response professional to lead end-to-end vulnerability management for deployed products. You will coordinate triage, risk assessment, and remediation with engineering, product teams and external researchers.

You will influence cross-functional partners, communicate advisories, and drive best practices to protect customers and maintain trust throughout the product lifecycle.