Embedded Security Engineer / Vulnerability Researcher (Embedded Systems)

What You Will DoAnalyze embedded software and systems for security vulnerabilities during product developmentExplore and validate potential attack paths across firmware, boot flows, and system interfacesPerform hands-on security testing using static and dynamic analysis techniquesSupport product security assessments and certification-related security activitiesInvestigate security incidents and vulnerability reports in collaboration with PSIRT and development teamsResearch and experiment with new or emerging attack techniques against secure embedded systemsAdvise development teams on concrete, practical security improvementsContribute to innovation by challenging assumptions and identifying systemic weaknessesWhat You BringTechnical BackgroundDegree in Electrical Engineering, Computer Science, or a related fieldStrong foundation in embedded systems or low-level software engineeringPractical experience with C; exposure to assembly (ARM or RISC-V) is highly valuedUnderstanding of bare-metal software, boot processes, memory layouts, and system behaviorFamiliarity with microcontroller or SoC architectures (ARM, RISC-V, or similar)Experience with or strong interest in security testing, reverse engineering, or vulnerability researchHands-on mindset - you like experimenting, probing, and validating ideas on real systemsWho You AreYou think like an engineer and like an attackerYou enjoy solving complex, non-obvious problemsYou are comfortable working independently but value collaborationYou can clearly explain technical findings to both experts and non-expertsYou are curious, pragmatic, and focused on real-world impactWhy Join UsWork on real embedded devices, not abstract security problemsAnalyze and influence the security of products used at scaleCollaborate with experts across hardware, firmware, and security researchFreedom to explore, experiment, and challenge designsAn inclusive environment that values diverse technical backgrounds and perspectivesPlease note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.

For applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung”, this position (fulltime) is graded in Employment Group IV. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.