> Markdown version of [/jobs/ext/1114200-senior-embedded-security-vulnerability-analyst](https://www.wearedevelopers.com/jobs/ext/1114200-senior-embedded-security-vulnerability-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Embedded Security Vulnerability Analyst - **Company:** NXP Semiconductors - **Location:** Gratkorn, Austria - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** C (Programming Language), Artificial Intelligence, Static Program Analysis, Software Debugging, Embedded Software, Firmware, Fuzz Testing, Joint Test Action (IEEE Standards), Program Analysis, Real-Time Operating Systems, Reverse Engineering, Reduced Instruction Set Computing, Scripting, Large Language Models, Concurrency, Information Technology, Bare Metal, Vulnerability Analysis - **Published:** July 2, 2026 - **Apply:** https://nxp.wd3.myworkdayjobs.com/careers/job/Gratkorn/Senior-Embedded-Security-Vulnerability-Analyst--m-f-d-_R-10064354 ## About the Role * strong embedded engineers with a demonstrated interest in transitioning into security, * Degree in Electrical Engineering, Computer Science, Mathematics, or related field * Strong understanding of low-level system behavior (memory layout, interrupts, privilege levels, concurrency) * Solid experience in C programming; familiarity with ARM and/or RISC-V architectures * Experience with assembly-level debugging and analysis Strong differentiators: * Experience with vulnerability research, reverse engineering, or exploit development * Familiarity with static and dynamic analysis tools, fuzzing, or symbolic execution * Understanding of common vulnerability classes (memory corruption, logic flaws, side channels) * Experience with debugging interfaces (e.g., JTAG, trace, GDB) * Experience using or evaluating AI-assisted code analysis or vulnerability discovery tools * Experience building or integrating automated analysis workflows (e.g., scripting, pipelines, agent-based approaches) * Rust experience or interest in memory-safe system design Your Profile * Strong analytical thinking and curiosity for how systems fail under adversarial conditions * Ability to work independently and drive complex technical investigations * Interest in combining deep technical analysis with modern AI-assisted techniques * Clear communication of technical findings and risks to diverse audiences * Collaborative mindset when working with development and architecture teams Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary. ## Description We are seeking a Senior Embedded Security Vulnerability Analyst to perform deep technical analysis of embedded systems, focusing on identifying and understanding vulnerabilities at the hardware/software boundary. You will analyze low-level firmware, boot code, and system components to uncover exploitable weaknesses and work closely with development teams to drive secure designs. The role requires a strong systems mindset, curiosity for attack techniques, and the ability to reason about complex execution environments. You will also leverage and help shape modern analysis approaches, including AI-assisted vulnerability discovery workflows, to improve both depth and scalability of analysis., * Perform in-depth vulnerability analysis of embedded software (bare-metal, RTOS, trusted execution environments) * Analyze boot flows, privilege boundaries, and security-critical components (e.g., crypto libraries, key handling, isolation mechanisms) * Conduct root cause analysis and assess exploitability and impact of identified weaknesses * Support security certifications and evaluations (e.g., PSA, SESIP, Common Criteria) * Analyze PSIRT incidents and derive structural improvements * Develop and apply analysis methodologies and tooling (static analysis, fuzzing, scripting, automation) * Apply and evaluate AI-assisted techniques for code analysis and vulnerability discovery (e.g., LLM-based workflows) * Design and refine workflows that combine traditional analysis (static and dynamic) with AI-assisted approaches * Research and evaluate emerging attack techniques relevant to embedded systems * Collaborate with development teams to translate findings into concrete mitigations ## Related Videos - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Single Server, Global Reach: Running a Worldwide Marketplace on Bare Metal in a Cloud-Dominated World](https://www.wearedevelopers.com/videos/1206-single-server-global-reach-running-a-worldwide-marketplace-on-bare-metal-in-a-cloud-dominated-world) - [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api) - [A Hitchhikers Guide to Container Security - Automotive Edition 2024](https://www.wearedevelopers.com/videos/1119-a-hitchhikers-guide-to-container-security-automotive-edition-2024) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)