Job
- Level
- Experienced
- Location
- Gratkorn
- Working Model
- Onsite
- Job Field
- IT, Embedded, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will analyze and harden embedded systems, discover security vulnerabilities, conduct security testing, and advise development teams on practical security improvements. You will research attack techniques and validate potential attack paths.
Job Technologies
Your role in the team
- We are looking for a curious and technically strong Embedded Security Engineer / Vulnerability Researcher to join our software vulnerability analysis team.
- In this role, you will break, analyze, and harden embedded systems used in next-generation products.
- Analyze embedded software and systems for security vulnerabilities during product development.
- Explore and validate potential attack paths across firmware, boot flows, and system interfaces.
- Perform hands-on security testing using static and dynamic analysis techniques.
- Support product security assessments and certification-related security activities.
- Investigate security incidents and vulnerability reports in collaboration with PSIRT and development teams.
- Research and experiment with new or emerging attack techniques against secure embedded systems.
- Advise development teams on concrete, practical security improvements.
- Contribute to innovation by challenging assumptions and identifying systemic weaknesses.
This text has been machine translated. Show original
Our expectations of you
Education
- Degree in Electrical Engineering, Computer Science, or a related field.
Qualifications
- Strong foundation in embedded systems or low‑level software engineering.
- Understanding of bare-metal software, boot processes, memory layouts, and system behavior.
- Familiarity with microcontroller or SoC architectures (ARM, RISC‑V, or similar).
- Hands-on mindset — you like experimenting, probing, and validating ideas on real systems.
- You think like an engineer and like an attacker.
- You enjoy solving complex, non-obvious problems.
- You are comfortable working independently but value collaboration.
- You can clearly explain technical findings to both experts and non‑experts.
- You are curious, pragmatic, and focused on real-world impact.
Experience
- Practical experience with C; exposure to assembly (ARM or RISC‑V) is highly valued.
- Experience with or strong interest in security testing, reverse engineering, or vulnerability research.
This text has been machine translated. Show original
What we offer
- NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry.
- Due to the Austrian Equal Treatment Act, we are obliged to specify the employment group of our applicable collective bargaining agreement (CBA) "Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung." This position (full-time) is classified in Employment Group IV.
- Your individual experiences and expectations will be considered in the application process.
- Moreover, we provide attractive benefits to our employees such as home office, flexible working hours, meal benefits, and more.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Food & Drink
Higher Take-Home Pay
Health, Fitness & Fun
Topics You Will Work On
Job Locations
About Your Employer
NXP Semiconductors Austria
Gratkorn
NXP Semiconductors is a global leader in microelectronics with subsidiaries in more than 25 countries. The Gratkorn site near Graz is the Austrian headquarters of the international group and the competence center for secure contactless identification systems.
Description
- Founding Year
- 2006
- Language
- English
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Industry, Production
Employer reviews
by devworkplaces.com
Total
(2 Reviews)3.7
Engineering
3.4Culture
3.7Workingconditions
4.2Career Growth
3.5
Embedded Security Engineer / Vulnerability Researcher
- Location
- Gratkorn
- Working Model
- Onsite
- Diversity
- Open for all genders
- English Only
- English only required
