PSIRT Program Lead: Vulnerability Response (Remote)

NXP Semiconductors NV; Netherlands; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

NXP Semiconductors NV is seeking a Product Security Incident Response Team member to lead operational responses to reported vulnerabilities affecting NXP hardware and software products. You will own security cases from intake to disclosure, coordinating across engineering, product management, quality, legal, and communications to drive timely resolutions.

The role emphasizes program leadership, case management, stakeholder coordination, and continuous improvement, with focus on cross‑functional

Qualifikationen

• Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, vulnerability management or technical engineering programs.
• 3+ years of relevant work experience.
• Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
• Ability to influence cross‑functional stakeholders across engineering, product management, quality, and customer‑facing teams.
• Demonstrated ability to coordinate complex investigations involving multiple technical and business organizations.
• Strong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting.
• Excellent communication skills and a passion for protecting innovative technology at scale.

Aufgaben

• Own the operational lifecycle of product vulnerability cases from intake through closure and disclosure.
• Establish the response plan, milestones, ownership, dependencies, escalation path, and communication cadence for each assigned case.
• Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer‑facing organizations.
• Track decisions, evidence, approvals, outstanding actions, and delivery risks.
• Facilitate vulnerability review meetings and drive actions to completion.
• Coordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and relevant external organizations.
• Manage CVE reservation and publication workflows in coordination with technical subject‑matter experts.
• Coordinate the creation, review, approval, and publication of security advisories and customer communications.
• Improve PSIRT procedures, templates, governance, and audit readiness.
• Support readiness for upcoming regulations such as the EU Cyber Resilience Act (CRA), future standards and vulnerability‑reporting obligations.

Kenntnisse

Vulnerability management

Incident handling

Program management

Cross‑functional collaboration

Communication

English fluency

Jobbeschreibung

NXP Semiconductors NV is seeking a Product Security Incident Response Team member to lead operational responses to reported vulnerabilities affecting NXP hardware and software products. You will own security cases from intake to disclosure, coordinating across engineering, product management, quality, legal, and communications to drive timely resolutions.

The role emphasizes program leadership, case management, stakeholder coordination, and continuous improvement, with focus on cross‑functional