Job
In this role, you will lead the operational response to security incidents, coordinate the remediation of vulnerabilities, and collaborate with various teams to effectively resolve and communicate security issues.
This listing has been machine translated. Show original
Your role in the team
- As a member of NXP's Product Security Incident Response Team, you will lead the operational response to reported vulnerabilities affecting NXP hardware and software products.
- You will own and drive security cases from initial intake through assessment, remediation coordination, customer communication, and responsible disclosure.
- This position focuses on program leadership, case management, stakeholder coordination, communication, and continuous improvement.
- You will bring together engineering, product management, quality, legal, communications, customer-facing teams, and external researchers to ensure that security issues progress toward a timely resolution.
- Own the operational lifecycle of product vulnerability cases from intake through closure and disclosure.
- Establish the response plan, milestones, ownership, dependencies, escalation path, and communication cadence for each assigned case.
- Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing organizations.
- Track decisions, evidence, approvals, outstanding actions, and delivery risks.
- Facilitate vulnerability review meetings and drive actions to completion.
- Coordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and relevant external organizations.
- Manage CVE reservation and publication workflows in coordination with technical subject-matter experts.
- Coordinate the creation, review, approval, and publication of security advisories and customer communications.
- Improve PSIRT procedures, templates, governance, and audit readiness.
- Support readiness for upcoming regulations such as the EU Cyber Resilience Act (CRA), future standards and vulnerability-reporting obligations.
Our expectations of you
Qualifications
- Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
- Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.
- Demonstrated ability to coordinate complex investigations involving multiple technical and business organizations.
- Strong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting.
- Excellent communication skills and a passion for protecting innovative technology at scale.
- Familiarity with embedded products, semiconductor products, firmware, automotive, industrial, or IoT environments is advantageous.
- PMP, PgMP, Scrum Master, SAFe, or other project/program management certifications are preferred, but not required.
- Fluent in English
Experience
- Experience in Product Security, Embedded Security, Semiconductor Security, cybersecurity, vulnerability management, or technical engineering programs.
- 3+ years of relevant work experience
What we offer
- The successful candidate may/will be responsible for security-related tasks.
- The assignment may fall within the scope of security certifications, so a conscientious and reliable approach to work is essential.
- For applications in Gratkorn: NXP offers market-competitive compensation based on benchmarks in the electronics and semiconductor industry.
- Due to the Austrian Equal Treatment Act, we are required to state the employment group under the applicable collective bargaining agreement (CBA), “Collective Agreement for Salaried Employees in Trade, Crafts and Services.” This full-time position is classified in Employment Group V.
- Your individual experiences and expectations will be considered in the application process.
- Moreover, we offer our employees attractive benefits such as working from home, flexible working hours, meal allowances, and more.
Benefits
Work-Life-Integration
Food & drink
Higher take-home pay
Health, fitness & fun
Topics you will work on
Job locations
About your employer
Gratkorn
NXP Semiconductors is a global leader in microelectronics with subsidiaries in more than 25 countries. The Gratkorn site near Graz is the Austrian headquarters of the international group and the competence center for secure contactless identification systems.
- 2006
- English
- Established Company
- Full Remote, Hybrid, Onsite
- Industry, Production
Employer reviews
- Engineering
- 3.4
- Team culture
- 3.8
- Working conditions
- 4.3
- Career growth
- 3.5
More jobs
These jobs might also interest you
Microsoft 365 & Identity + Active Directory: You manage our M365 environment (Entra ID, Intune, Exchange Online, Defender) and drive forward the Entra ID hardening (Conditional Access, MFA, Privileged Identity Management). You oversee our Active...
Do you enjoy diving deep into code and want to build a product that truly makes an impact? With us, you work hands-on on an AI platform that combines SaaS and on-premises, exclusively relies on open source, and successfully implements AI on-prem and...
End-to-End Development:You accompany exciting software projects from the initial requirements analysis through implementation (e.g., with Spring Boot) to successful deployment. Microservices & Architecture:You design and develop robust, highly scalable...
