Senior Embedded Security Architect — Crypto & IoT

NXP Semiconductors; Netherlands; On-site; EUR 110,000 - 140,000; Full time

Job summary

NXP Semiconductors is seeking a Software Security Architect to drive secure architectures across embedded products. You will gather requirements, design, review, and implement security solutions for NXP products, and collaborate with product teams, security experts, and stakeholders to ensure lifecycle security and regulatory compliance.

The role emphasizes cryptographic services, root-of-trust, secure boot, and secure update mechanisms, with a strong focus on risk assessment and secure design

Qualifications

• Master's degree, PhD, or equivalent experience in computer science, cybersecurity, software engineering, electronics, mathematics, or related field.
• Strong background in cybersecurity and software security architecture.
• Extensive experience in embedded software development using C, Rust, and/or assembly.
• Knowledge of SoC software stacks, middleware, firmware, OS, and applications.
• Experience with threat modelling, security risk assessment, and secure system design.
• Familiarity with security technologies such as Secure Boot, cryptography, key management, device identity, root of trust, firmware protection, and secure update mechanisms.
• Familiarity with cybersecurity regulations, standards, and certification schemes for embedded/connected products.

Responsibilities

• Specify, design, review, and evolve system software security architectures and implementations.
• Conduct threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.
• Define security requirements and establish traceability from security objectives to implementation and verification activities.
• Integrate security-by-design principles throughout the product lifecycle.
• Support SDL activities, including architecture reviews, security assessments, and security verification.
• Analyze vulnerabilities, perform root cause analysis, and define mitigations and countermeasures.
• Define and review security mechanisms like secure boot, secure update, cryptographic services, key management, device identity, and root of trust.
• Translate cybersecurity standards and regulations into practical engineering requirements.
• Drive adoption of security best practices across project teams and product lines.
• Serve as technical interface to customers, evaluation labs, compliance experts, and product teams.
• Contribute to continuous improvement of product security methodologies, frameworks, and processes.

Skills

Cybersecurity

Software security

Embedded programming

Threat modelling

Security risk assessment

Secure design

Cryptography

Root of Trust

Communication & stakeholder mgmt

Education

Master's degree / PhD in CS or related

Tools

PSA Certified

SESIP

Common Criteria

Job description

NXP Semiconductors is seeking a Software Security Architect to drive secure architectures across embedded products. You will gather requirements, design, review, and implement security solutions for NXP products, and collaborate with product teams, security experts, and stakeholders to ensure lifecycle security and regulatory compliance.

The role emphasizes cryptographic services, root-of-trust, secure boot, and secure update mechanisms, with a strong focus on risk assessment and secure design