Software Security Architect (AI)

TL;DR

Software Security Architect (AI): Designing and implementing end-to-end security architectures for embedded systems across automotive and IoT domains with an accent on AI security and risk assessment. Focus on integrating security-by-design principles, conducting threat analysis, and ensuring compliance with the Cyber Resilience Act (CRA).

Location: Gratkorn, Austria (Hybrid / Home office available)

Company

World leader in secure connectivity and processing solutions for embedded applications, specializing in automotive, industrial, IoT, and edge processing.

What you will do

• Specify, design, and evolve system software security architectures and implementations for NXP products.
• Conduct threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.
• Define security requirements and establish traceability from security objectives to implementation and verification.
• Implement and review security mechanisms including secure boot, secure update, cryptographic services, and root-of-trust solutions.
• Support compliance with cybersecurity regulations and standards, specifically the Cyber Resilience Act (CRA).
• Act as a technical interface for customers, evaluation labs, and cross-functional product development teams.

Requirements

• Master's degree or PhD in Computer Science, Cybersecurity, Software Engineering, or a related technical field.
• Strong background in cybersecurity and software security architecture.
• Extensive experience in embedded software development using C, Rust, and/or assembly language.
• AI security experience is a must.
• Deep understanding of SoC software stacks, middleware, firmware, and operating systems.
• Experience with threat modeling and secure system design.

Nice to have

• Security architecture experience for automotive, industrial, or IoT products.
• Knowledge of certification frameworks such as PSA Certified, SESIP, or Common Criteria.
• Experience in vulnerability management and penetration testing.
• Expertise in hardware/software security co-design.

Culture & Benefits

• Market competitive compensation based on semiconductor industry benchmarks.
• Flexible working hours and home office options.
• Meal benefits.
• Opportunity to build technology that protects real devices worldwide in a global, cross-functional environment.