Job
In diesem Job leitest du die operative Reaktion auf Sicherheitsvorfälle, koordinierst die Behebung von Schwachstellen und arbeitest eng mit verschiedenen Abteilungen zusammen, um Sicherheitsprobleme effektiv zu lösen und zu kommunizieren.
Deine Rolle im Team
- As a member of NXP's Product Security Incident Response Team, you will lead the operational response to reported vulnerabilities affecting NXP hardware and software products.
- You will own and drive security cases from initial intake through assessment, remediation coordination, customer communication, and responsible disclosure.
- This position focuses on program leadership, case management, stakeholder coordination, communication, and continuous improvement.
- You will bring together engineering, product management, quality, legal, communications, customer-facing teams, and external researchers to ensure that security issues progress toward a timely resolution.
- Own the operational lifecycle of product vulnerability cases from intake through closure and disclosure.
- Establish the response plan, milestones, ownership, dependencies, escalation path, and communication cadence for each assigned case.
- Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing organizations.
- Track decisions, evidence, approvals, outstanding actions, and delivery risks.
- Facilitate vulnerability review meetings and drive actions to completion.
- Coordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and relevant external organizations.
- Manage CVE reservation and publication workflows in coordination with technical subject-matter experts.
- Coordinate the creation, review, approval, and publication of security advisories and customer communications.
- Improve PSIRT procedures, templates, governance, and audit readiness.
- Support readiness for upcoming regulations such as the EU Cyber Resilience Act (CRA), future standards and vulnerability-reporting obligations.
Unsere Erwartungen an dich
Qualifikationen
- Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
- Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.
- Demonstrated ability to coordinate complex investigations involving multiple technical and business organizations.
- Strong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting.
- Excellent communication skills and a passion for protecting innovative technology at scale.
- Familiarity with embedded products, semiconductor products, firmware, automotive, industrial, or IoT environments is advantageous.
- PMP, PgMP, Scrum Master, SAFe, or other project/program management certifications are preferred, but not required.
- Fluent in English
Erfahrung
- Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, vulnerability management or technical engineering programs.
- 3 + years of relevant work experience
Unser Angebot
- The successful candidate may/will be responsible for security related tasks.
- The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.
- For applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry.
- Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) "Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung", this position (fulltime) is graded in Employment Group V.
- Your individual experiences and expectations will be considered in the application process.
- Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.
Benefits
Work-Life-Integration
Essen & Trinken
Mehr Netto
Gesundheit, Fitness & Fun
Themen, mit denen du dich im Job beschäftigst
Job-Standorte
Das ist dein Arbeitgeber
Gratkorn
NXP Semiconductors ist ein weltweit führendes Unternehmen der Mikroelektronik mit Niederlassungen in mehr als 25 Ländern. Der Standort Gratkorn bei Graz ist die Österreichzentrale des internationalen Konzerns und das Kompetenzzentrum für sichere kontaktlose Identifikationssysteme.
- 2006
- Englisch
- Etablierte Firma
- Full Remote, Hybrid, Onsite
- Industrie, Produktion
Arbeitgeber-Reviews
- Engineering
- 3,4
- Teamkultur
- 3,8
- Arbeitsbedingungen
- 4,3
- Karriere
- 3,5
Weitere Jobs
Diese Jobs könnten dich auch interessieren
Microsoft 365 & Identity + Active Directory: Du administrierst unsere M365-Umgebung (Entra ID, Intune, Exchange Online, Defender) und treibst das Entra ID Hardening voran (Conditional Access, MFA, Privileged Identity Management). Du betreust unser...
Du steckst gern tief im Code und willst an einem Produkt bauen, das echten Impact hat? Bei uns arbeitest du hands-on an einer KI-Plattform, die SaaS und On-Prem vereint, ausschließlich auf Open Source setzt und KI on-prem und on-device in sensiblen...
End-to-End Entwicklung: Du begleitest spannende Softwareprojekte von der ersten Anforderungsanalyse über die Implementierung (zB mit Spring Boot) bis hin zum erfolgreichen Deployment. Microservices & Architektur: Du konzipierst und entwickelst...
