Software Security Architect – Cyber Resilience Act (CRA) & Product Security (m/f/d)
Core
Define and drive the Cyber Resilience Act (CRA) compliance strategy for NXP's MCU and MPU product portfolios while establishing security requirements and ensuring end-to-end traceability throughout the development lifecycle.
Role type
Senior IC software security architect (embedded systems & regulatory compliance)
Builds
Secure embedded and semiconductor-based products (MCU/MPU) for automotive, industrial, IoT, and mobile markets
Domain
Semiconductor industry + embedded systems security + EU regulatory compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
embedded systems security, software and hardware security architecture, threat modeling, secure system design, security risk assessment, cryptography and key management, firmware protection, device identity and root of trust, secure update mechanisms, translating security requirements into technical architectures
Preferred skills
security architecture for embedded/IoT/automotive/industrial systems, PSA Certified, SESIP, Common Criteria, Cyber Resilience Act (CRA) implementation, secure development lifecycle (SDL), security assessments, penetration testing, vulnerability analysis, secure hardware/software co-design
Technologies
Secure Boot, Cryptography, Key Management, Firmware Protection, Device Identity, Root of Trust, Secure Update Mechanisms
Responsibilities
Define and drive CRA compliance strategy for MCU/MPU portfolios, influence security architecture decisions across product lines, translate regulatory requirements into actionable security controls, drive security-by-design methodologies, lead system-level threat modeling and attack surface analysis, establish security requirements with end-to-end traceability, support audit readiness through compliance documentation, collaborate with global cross-functional teams, drive adoption of security best practices
Seniority
Senior, hands-on IC with strategic regulatory leadership
