обновлено 1 месяц назад
Product Security Vulnerability Response Manager (Embedded & Semiconductor Security)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Product Security Vulnerability Response Manager (Embedded & Semiconductor Security) (Product Security/PSIRT): Leading end-to-end vulnerability response for secure chips and embedded semiconductor products deployed in automotive, industrial, IoT, mobile, and edge devices with an accent on vulnerability triage, product risk assessment, coordinated disclosure, and customer communication. Focus on coordinating remediation across engineering and product teams, managing CVE and security advisory processes, and strengthening post-production product resilience.
Location: Gratkorn, Austria
Company
develops secure chips and semiconductor products embedded in automotive, industrial, IoT, mobile, and edge devices.
What you will do
- Lead the response and coordination of security vulnerabilities affecting NXP hardware and software products.
- Drive vulnerability triage, impact assessment, severity classification, and prioritization.
- Coordinate mitigation strategies and remediation plans with engineering and product teams.
- Manage responsible disclosure with external security researchers, customers, and industry partners.
- Oversee security advisories, CVE processes, and customer communications.
- Improve PSIRT processes, metrics, and operational execution while advising product teams on vulnerability management.
Requirements
- Experience in product security, embedded security, semiconductor security, cybersecurity, or secure product development.
- Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
- Hands-on experience with product, embedded, or hardware security and an understanding of attacks against semiconductor devices and embedded systems.
- Ability to influence stakeholders across engineering, product management, quality, and customer-facing teams.
- Excellent communication skills and the ability to assess the potential impact of security issues on products.
Culture & Benefits
- Home office options and flexible working time.
- Meal benefits and additional employee benefits.
- Work at the intersection of Product Security, Engineering, R&D, customers, and external security researchers.
- For Austrian applicants, compensation follows benchmarking for the electronic and semiconductor industry and the applicable collective bargaining agreement.
- The position is classified in Employment Group V under the applicable Austrian collective bargaining agreement.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →