Software Security Architect - AI (m/f/d)
NXP Semiconductors23 days ago
Glasgow, United KingdomSenior
Responsibilities
- Specify, design, review, and evolve system software security architectures and implementations.
- Conduct threat analysis, attack-surface analysis, and security risk assessments for embedded systems and software platforms.
- Define security requirements and traceability from security objectives through implementation and verification.
- Integrate security-by-design principles throughout the product lifecycle and support secure development lifecycle activities.
- Analyze vulnerabilities and defects, perform root-cause analysis, and define mitigations and countermeasures.
- Define and review secure boot, secure update, cryptographic, key-management, device-identity, firmware-protection, and root-of-trust mechanisms.
- Translate cybersecurity standards, regulations, and industry practices into engineering requirements and architectures.
- Support Cyber Resilience Act compliance through security documentation, evidence generation, and risk management.
- Drive security best practices across project teams and product lines and serve as a technical interface for customers, evaluation labs, compliance experts, and development teams.
- Improve NXP product security methodologies, frameworks, and processes.
Requirements
- Master's degree, PhD, or equivalent experience in Computer Science, Cybersecurity, Software Engineering, Electronics, Mathematics, or a related technical field.
- Strong background in cybersecurity and software security architecture.
- Extensive embedded software development experience using C, Rust, and/or assembly language.
- Experience in AI security is required.
- Strong understanding of SoC software stacks, middleware, firmware, operating systems, and applications.
- Experience with threat modeling, security risk assessment, and secure system design.
- Familiarity with Secure Boot, cryptography and key management, device identity and root of trust, firmware protection, and secure update mechanisms.
- Familiarity with cybersecurity regulations, standards, and certification schemes for embedded and connected products.
- Strong analytical, communication, stakeholder management, collaboration, and independent-working skills.
- Preferred experience includes security architecture for automotive, industrial, or IoT products; Cyber Resilience Act compliance; Secure Development Lifecycle practices; PSA Certified, SESIP, or Common Criteria; vulnerability management, penetration testing, or security assessments; hardware/software security co-design; and artificial intelligence and AI security.
Benefits
- Full-time position in Austria with home office options.
- Flexible working time.
- Meal benefits and other employee benefits.
- Compensation benchmarked to the electronic and semiconductor industry, with individual experience and expectations considered.
About NXP Semiconductors
NXP Semiconductors designs and supplies microcontrollers, application processors (i.MX), analog/RF, secure connectivity, and automotive chips for OEMs in automotive, industrial/IoT, mobile, and communications infrastructure markets. A public company (NASDAQ: NXPI) founded in 2006 and headquartered in Eindhoven, it sells silicon, software, and reference designs, and supports customers with BSPs and development tools. Notable lines include i.MX processors, S32 automotive platforms, NFC and secure elements, radar, and power management devices.