NXP Semiconductors Logo

NXP Semiconductors

Product Security Vulnerability Response Manager - Embedded & Semiconductor Security (m/f/d)

Posted One Month Ago
Be an Early Applicant
In-Office
Leuven
Senior level
In-Office
Leuven
Senior level
Lead product security incident response for hardware and software products: triage vulnerabilities, manage PSIRT JIRA tickets, coordinate cross-functional remediation, engage external researchers and vendors, define best practices for third-party and open-source components, and contribute to relevant regulations and standards.
The summary above was generated by AI

Help protect technology that powers millions of devices worldwide.

As a member of NXP's Product Security Incident Response Team (PSIRT), you will play a key role in safeguarding our secure chip products after they have been deployed to customers around the globe.

Acting as the central point of coordination for product security incidents, you will work closely with engineering teams, customers, and security researchers to investigate vulnerabilities, assess risks, coordinate remediation efforts, and communicate security guidance. You will drive security issues from initial reporting through resolution and responsible disclosure, helping ensure that customers can continue to trust the products they rely on every day.

This is not a purely hands-on engineering role. Instead, it offers a unique blend of product security, incident response, stakeholder management, and technical leadership. Success in this position comes from your ability to bring together experts from different disciplines, navigate complex security challenges, and drive solutions to completion.

Our PSIRT team is dedicated to rapidly addressing security threats affecting NXP products worldwide. By investigating reported vulnerabilities, evaluating their impact, and providing timely and actionable guidance to customers, we help protect products throughout their lifecycle and maintain the trust that customers place in NXP.

If you enjoy leading security investigations, coordinating across diverse stakeholders, and making a visible impact on the security of products used by millions of people worldwide, we'd love to hear from you.

See also www.nxp.com/psirt.  

Ideally, you bring hands-on experience in product, embedded, or hardware security and possess a solid understanding of how attackers target semiconductor devices and embedded systems. You are familiar with common attack techniques and can help assess their potential impact on NXP products.

What you'll do: A snapshot of your key responsibilities and impact.

  • Lead the response and coordination of security vulnerabilities affecting NXP products, hardware and software.

  • Drive vulnerability triage, impact assessment, severity classification, and prioritization.

  • Collaborate with engineering and product teams to develop mitigation strategies and remediation plans.

  • Coordinate responsible disclosure activities with external researchers, customers, and industry partners.

  • Oversee security advisories, CVE processes, and customer communications.

  • Act as a trusted advisor to product teams on vulnerability management and product security best practices.

  • Continuously improve PSIRT processes, metrics, and operational excellence.

What you'll bring

  • Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, or Secure Product Development.

  • Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.

  • Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.

  • Excellent communication skills and a passion for protecting innovative technology at scale.

Understand Threats.  Protect Products. Protect Customers. Lead Response. Reduce Risk. Build Trust. Drive Security. Create Impact. Shape Tomorrow.

For Austrian applicants: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung“, this position (fulltime) is graded in Employment Group V. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.

More information about NXP in Austria...

#LI-b6c8

Similar Jobs

3 Days Ago
Remote or Hybrid
Entry level
Entry level
Cloud • Healthtech • Social Impact • Software • Biotech
Drive new business and revenue growth across the Nordic territory by generating pipeline, managing complex SaaS sales cycles, forecasting accurately, presenting solutions, negotiating with technical and executive stakeholders, and closing strategic accounts. The role also involves account relationship management, collaboration with marketing, product, customer success, and channel teams, Salesforce data integrity, and use of structured sales methodologies such as MEDDICC.
Top Skills: Artificial IntelligenceMeddiccSaaSSalesforce
3 Days Ago
Remote or Hybrid
Junior
Junior
Consumer Web • Digital Media • Edtech • Information Technology • Social Impact • Software
Oversee scientific manuscript peer review from reviewer selection through editorial decisions, revisions, production, and publication. Coordinate with authors, editors, publishing managers, and production providers to ensure timely, accurate, ethical, and high-quality publication of manuscripts. Manage high volumes independently, meet strict deadlines, and ensure compliance with journal and industry standards.
Top Skills: HTMLLatexExcelMS OfficeMicrosoft PowerpointMicrosoft WordPdfXML
4 Days Ago
Remote or Hybrid
Senior level
Senior level
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Leads incentive compensation strategy, quota-setting, recognition programs, analytics, governance, implementation, and continuous improvement across Pfizer’s international markets. Partners with business leaders and cross-functional teams to design compliant, motivating, and financially responsible programs, deliver data-driven recommendations, oversee payouts and operational timelines, and maintain audit readiness. The role requires strong quantitative analysis, commercial operations expertise, project management, stakeholder influence, and experience supporting pharmaceutical or healthcare organizations.

What you need to know about the Edinburgh Tech Scene

From traditional pubs and centuries-old universities to sleek shopping malls and glass-paneled office buildings, Edinburgh's architecture reflects its unique blend of history and modernity. But the fusion of past and future isn't just visible in its buildings; it's also shaping the city's economy. Named the United Kingdom's leading technology ecosystem outside of London, Edinburgh plays host to major global companies like Apple and Adobe, as well as a growing number of innovative startups in fields like cybersecurity, finance and healthcare.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account