Full job description

Join one of the largest industrial security teams and build technology that protects real devices, worldwide.

At NXP’s Competence Center Crypto & Security, we design, build, and deliver end-to-end security — from innovation to architecture to products in the field.

If you’re a security engineer who wants impact, on real life security solutions, we’d love to hear from you.

Our Chief Technology Office (CTO) organization drives innovation across NXP and supports Business Units with the tools, knowledge, and processes required to create secure products for our customers. The Security Architecture Team within the Competence Center Crypto & Security (CC C&S) plays a key role in enabling secure products across the Automotive, Industrial, IoT, Mobile, and Edge Processing markets.

Your Role

Join our team and support product development teams in gathering requirements, specifying, designing, reviewing, verifying, and implementing security solutions for NXP products.

As a Software Security Architect, you will help ensure that security is built into products throughout their entire lifecycle. You will collaborate with product teams, security experts, and stakeholders across the company to develop robust security architectures, assess security risks, and support compliance with relevant cybersecurity standards and regulations, including the Cyber Resilience Act (CRA).

Your Responsibilities

Specify, design, review, and evolve system software security architectures and implementations.
Conduct threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.
Define security requirements and establish traceability from security objectives to implementation and verification activities.
Integrate security-by-design principles throughout the complete product lifecycle.
Support secure development lifecycle (SDL) activities, including architecture reviews, security assessments, and security verification.
Analyze security vulnerabilities and defects, perform root cause analysis, and define appropriate mitigations and countermeasures.
Define and review security mechanisms such as secure boot, secure update, cryptographic services, key management, device identity, and root-of-trust solutions.
Translate cybersecurity standards, regulatory requirements, and industry best practices into practical engineering requirements and architectures.
Support compliance activities related to product security regulations and standards, including the Cyber Resilience Act (CRA), through security documentation, evidence generation, and risk management activities.