Software Security Architect – Cyber Resilience Act (CRA) Focus (m/f) at NXP Semiconductors

Gratkorn, Styria, Austria -

Full Time

Start Date

Immediate

Expiry Date

06 Sep, 26

Salary

0.0

Posted On

08 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Embedded Systems Security, Software Security Architecture, Threat Modeling, Secure Boot, Cryptography, Firmware Protection, Cyber Resilience Act (CRA), PSA, SESIP, Common Criteria, Security Risk Assessment, Stakeholder Management, Regulatory Compliance, System-Level Thinking, Cross-functional Collaboration, Security-by-Design

Industry

Semiconductor Manufacturing

Description

Join one of the world’s largest industrial security teams — and build technology that protects real devices worldwide. At NXP’s Competence Center Crypto & Security (CC C&S), we design, build, and deliver end-to-end security — from early innovation to architecture to products in the field. If you're a security engineer who wants to create real-world impact, we’d love to hear from you. We are seeking an experienced Software Security Architect to join our Software Security Architecture team within CCC&S. In this role, you will take a leading position in driving Cyber Resilience Act (CRA) readiness across our product portfolio, ensuring compliance with upcoming mandatory regulatory requirements. This role combines strategic ownership and hands-on technical expertise at the intersection of product security architecture, regulatory compliance, and system-level threat analysis. You will support both legacy product lines and new product introductions (NPI), embedding security-by-design principles and ensuring lifecycle compliance across all development stages. Your Responsibilities: Define and drive the CRA compliance strategy for MCU and MPU product portfolios through the central security architecture team. Ensure alignment with upcoming mandatory CRA requirements (target: 2027) Translate regulatory requirements into practical security controls, design principles, and architecture guidelines Support audit readiness (compliance doczntation, security evidence generation and end to end traceability of requirements) Define, implement, and maintain robust security architectures across Legacy products & New Product Introductions (NPI) Ensure consistent application of security standards, methodologies, and best practices across product lines Collaborate with cross-functional teams (engineering, product management, compliance) to embed security into development processes Lead and conduct system-level threat modeling and threat analysis (hardware and software) Perform security risk assessments aligned with CRA expectations and industry standards Your profile Strong background in Embedded systems security, Software and/or hardware security architecture Proven experience with Threat modeling methodologies and security technologies such as secure boot, cryptography, firmware protection Familiarity with security certification frameworks, such as: PSA, SESIP, Common Criteria Experience with or strong interest in Cyber Resilience Act (CRA), Product security regulations and standards, Compliance-driven development and documentation Ability to translate regulatory requirements into technical implementation Strong analytical and system-level thinking Excellent stakeholder management and cross-functional collaboration skills Comfortable working in a global, matrixed organization with diverse product teams Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary. For applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung“, this position (fulltime) is graded in Employment Group V after 6 years. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more. More information about NXP in Austria... #LI-a8a1 NXP Semiconductors N.V. (NASDAQ: NXPI) enables a smarter, safer, and more sustainable world through innovation. As the world leader in secure connectivity solutions for embedded applications, NXP is pushing boundaries in the automotive, industrial & IoT, mobile, and communication infrastructure markets. For more information, visit www.nxp.com Bright Minds. Bright Futures. We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills. Commitment At NXP. We recognize NXP is a powerful change agent as we continue to deliver innovative solutions that advance a more sustainable future. We remain steadfast in our commitment to sustainability and making measurable year-on-year progress. Also, we aim to create an inclusive work environment and we will not tolerate racism, discrimination or harassment of any kind. We have programs in place focused on diversity, inclusion and equality. Thank you for considering a career at NXP. To help you prepare for the different steps in our hiring process, see the following useful advice and tips. Are you already an NXP employee? Do not apply here. Instead, you must apply via our internal career page. Thank you for your interest in supporting our recruitment efforts. Please note that NXP operates under a strict Preferred Supplier List (PSL) for all recruitment activities. Any candidate profiles or resume submitted without a prior written agreement or explicit request from our Talent Acquisition team will be considered unsolicited. Such submissions will be deemed free of any obligations, and no fees will be paid by NXP or any of its affiliates, subsidiaries, or divisions - regardless of whether the candidate is hired, either coincidentally or otherwise. Thank you for your understanding.

Responsibilities

Lead the Cyber Resilience Act (CRA) compliance strategy for MCU and MPU product portfolios to ensure regulatory readiness by 2027. Define and implement robust security architectures and conduct system-level threat modeling for both legacy and new product introductions.