Logo NXP Semiconductors Austria

Software Security Architect - Cyber Resilience Act Focus

Neu

Job

  • Level
    Erfahren
  • Job Feld
    IT, Embedded, Security
  • Anstellung
    Vollzeit
  • Vertragsart
    Unbefristetes Dienstverhältnis
  • Ort
    Gratkorn
  • Arbeitsmodell
    Onsite
  • Job Zusammenfassung

    In dieser Position entwickelst du Sicherheitsarchitekturen und gewährleistest die Einhaltung der Cyber Resilience Act-Anforderungen für unsere Produkte. Du führst Threat-Analysen durch und übersetzt regulatorische Anforderungen in technische Maßnahmen.

    Deine Rolle im Team

    • Join one of the world's largest industrial security teams - and build technology that protects real devices worldwide.
    • At NXP's Competence Center Crypto & Security (CC C&S), we design, build, and deliver end-to-end security - from early innovation to architecture to products in the field.
    • We are seeking an experienced Software Security Architect to join our Software Security Architecture team within CCC&S.
    • In this role, you will take a leading position in driving Cyber Resilience Act (CRA) readiness across our product portfolio, ensuring compliance with upcoming mandatory regulatory requirements.
    • This role combines strategic ownership and hands-on technical expertise at the intersection of product security architecture, regulatory compliance, and system-level threat analysis.
    • You will support both legacy product lines and new product introductions (NPI), embedding security-by-design principles and ensuring lifecycle compliance across all development stages.
    • Define and drive the CRA compliance strategy for MCU and MPU product portfolios through the central security architecture team.
    • Ensure alignment with upcoming mandatory CRA requirements (target: 2027).
    • Translate regulatory requirements into practical security controls, design principles, and architecture guidelines.
    • Support audit readiness (compliance documentation, security evidence generation and end to end traceability of requirements).
    • Define, implement, and maintain robust security architectures across Legacy products & New Product Introductions (NPI).
    • Ensure consistent application of security standards, methodologies, and best practices across product lines.
    • Collaborate with cross-functional teams (engineering, product management, compliance) to embed security into development processes.
    • Lead and conduct system-level threat modeling and threat analysis (hardware and software).
    • Perform security risk assessments aligned with CRA expectations and industry standards.

    Unsere Erwartungen an dich

    Qualifikationen

    • Strong background in Embedded systems security, Software and/or hardware security architecture.
    • Familiarity with security certification frameworks, such as: PSA, SESIP, Common Criteria.
    • Ability to translate regulatory requirements into technical implementation.
    • Strong analytical and system-level thinking.
    • Excellent stakeholder management and cross-functional collaboration skills.
    • Comfortable working in a global, matrixed organization with diverse product teams.

    Erfahrung

    • Proven experience with Threat modeling methodologies and security technologies such as secure boot, cryptography, firmware protection.
    • Experience with or strong interest in Cyber Resilience Act (CRA), Product security regulations and standards, Compliance-driven development and documentation.

    Unser Angebot

    • The successful candidate may/will be responsible for security related tasks.
    • The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.
    • For applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry.
    • Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) "Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung", this position (fulltime) is graded in Employment Group V after 6 years.
    • Your individual experiences and expectations will be considered in the application process.
    • Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.

    Benefits

    Work-Life-Integration

    Essen & Trinken

    Mehr Netto

    Gesundheit, Fitness & Fun

    Themen mit denen du dich im Job beschäftigst

    Job Standorte

    Map of company locations
    • Standort Gratkorn

      8101 Steiermark

      Österreich

    Das ist dein Arbeitgeber

    NXP Semiconductors Austria

    NXP Semiconductors Austria

    Gratkorn

    NXP Semiconductors ist ein weltweit führendes Unternehmen der Mikroelektronik mit Niederlassungen in mehr als 25 Ländern. Der Standort Gratkorn bei Graz ist die Österreichzentrale des internationalen Konzerns und das Kompetenzzentrum für sichere kontaktlose Identifikationssysteme.

    Description

  • Gründungsjahr
    2006
  • Sprachen
    Englisch
  • Unternehmenstyp
    Etablierte Firma
  • Arbeitsmodell
    Full Remote, Hybrid, Onsite
  • Branche
    Industrie, Produktion
  • Dev Reviews

    by devworkplaces.com

    Gesamt

    (2 Bewertungen)
    3.7
    • Culture

      3.7
    • Engineering

      3.4
    • Career Growth

      3.5
    • Workingconditions

      4.2
    Alle Dev Reviews anzeigen
    Logo NXP Semiconductors Austria

    Software Security Architect - Cyber Resilience Act Focus

    Ort
    Gratkorn
    Arbeitsmodell
    Onsite
    Diversität
    Für alle Personen geeignet (m/w/d)
    Nur Englisch
    Nur Englisch erforderlich

    Weitere Jobs