{"id":110882,"url":"https://alion.io/job/nxp-principal-embedded-security-vulnerability-analyst-mfd","title":"Principal Embedded Security Vulnerability Analyst (m/f/d)","company":{"id":17368,"name":"NXP Semiconductors","domain":"nxp.com","url":"https://alion.io/company/nxp","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":200,"ghost_share":0,"stale_share":0.92,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Leuven, Belgium","Austria"],"countries":["BE","AT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":72000,"max_usd":186000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"LLM","optional":false},{"name":"RTOS","optional":false},{"name":"Rust","optional":false}],"status":"live","first_seen_at":"2026-07-02T00:00:00Z","employer_posted_date":"2026-07-02","last_verified_at":"2026-10-18T07:33:41Z","board_verified":true,"closed_at":null,"days_open":108,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":108},"description":"We are seeking a Principal Embedded Security Vulnerability Analyst to lead deep technical analysis of embedded systems, focusing on identifying and understanding vulnerabilities at the hardware/software boundary.\nYou will drive the discovery and analysis of complex vulnerabilities in low-level firmware, boot code, and system components, and influence the security architecture of next-generation products. This role requires expert-level systems thinking, a deep understanding of attack techniques, and the ability to reason about complex execution environments.\nYou will also define and advance modern vulnerability analysis approaches, including the integration of AI-assisted and agentic workflows, to significantly improve the depth, scalability, and effectiveness of security assessments.\nIf you are already exploring how LLMs and agentic workflows can augment deep code and system analysis, this role provides an opportunity to apply, scale, and shape these approaches across an organization.\nWe welcome both:\nexperienced security researchers\n\nhighly experienced embedded engineers with a demonstrated transition into security\n\nYour Responsibilities\nLead in-depth vulnerability analysis of embedded software (bare-metal, RTOS, trusted execution environments)\n\nDrive analysis of boot flows, privilege boundaries, and security-critical components (e.g., crypto libraries, key handling, isolation mechanisms)\n\nOwn root cause analysis and assess exploitability and systemic impact of identified weaknesses\n\nDefine and guide security evaluation strategies for certifications (e.g., PSA, SESIP, Common Criteria)\n\nLead analysis of PSIRT incidents and drive structural and architectural improvements\n\nArchitect and develop advanced analysis methodologies and tooling (static analysis, fuzzing, automation frameworks)\n\nDefine and scale the use of AI-assisted techniques for code analysis and vulnerability discovery (e.g., LLM-based and agentic workflows)\n\nDesign and institutionalize workflows that combine traditional analysis (static/dynamic) with AI-assisted approaches\n\nEvaluate and introduce emerging attack techniques and incorporate them into internal methodologies\n\nInfluence product teams and architecture decisions by translating findings into systemic mitigations\n\nMentor and guide other engineers in vulnerability analysis and research methodologies\n\nEducation & Qualifications\nDegree in Electrical Engineering, Computer Science, Mathematics, or related field, or equivalent practical experience\n\nDeep understanding of low-level system behavior (memory layout, interrupts, privilege levels, concurrency)\n\nExtensive experience in C programming; strong familiarity with ARM and/or RISC-V architectures\n\nStrong experience with assembly-level debugging and low-level system analysis\n\nStrong differentiators:\nProven track record in vulnerability research, reverse engineering, or exploit development\n\nDeep experience with static and dynamic analysis tools, fuzzing, or symbolic execution\n\nStrong understanding of vulnerability classes (memory corruption, logic flaws, side channels) and exploitation techniques\n\nExperience with debugging interfaces (e.g., JTAG, trace, GDB) in complex systems\n\nExperience evaluating and operationalizing AI-assisted vulnerability discovery tools and workflows\n\nExperience building scalable and automated analysis pipelines (e.g., scripting, distributed systems, agent-based approaches)\n\nRust experience or strong interest in memory-safe system design\n\nYour Profile\nExpert-level analytical thinking and strong intuition for how systems fail under adversarial conditions\n\nAbility to lead complex, ambiguous technical investigations end-to-end\n\nStrong interest in combining deep technical expertise with modern AI-assisted methodologies\n\nAbility to influence technical direction across teams and organizational levels\n\nClear and authoritative communication of technical risks and findings\n\nMentorship mindset and willingness to develop others\n\nWhy Join Us\nLead vulnerability analysis for security-critical components of modern embedded systems and silicon\n\nDirectly influence the security architecture of next-generation products\n\nShape and scale advanced vulnerability research methodologies, including AI-assisted analysis\n\nWork in an environment that values deep technical expertise and offensive security thinking\n\nCollaborate with experts across hardware, firmware, and applied security research\n\nPlease note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.\nFor applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung“, this position (fulltime) is graded in Employment Group V after 6 years. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.\n More information about NXP in Austria...\n#LI-a8a1","description_format":"text","description_chars":5371,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Home office"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IoT Security","Processors, MCUs & AI Chips","RF & Wireless Hardware","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-07-02T00:00:00Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.381,"p_room":0.28,"age_days":107,"expected_fill_days":34,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/nxp-principal-embedded-security-vulnerability-analyst-mfd","json_url":"https://alion.io/job/nxp-principal-embedded-security-vulnerability-analyst-mfd.json","meta":{"generated_at":"2026-10-18T10:41:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15860,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17368},"rest":"https://alion.io/mcp/rest/get_company?id=17368"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnxp-principal-embedded-security-vulnerability-analyst-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnxp-principal-embedded-security-vulnerability-analyst-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnxp-principal-embedded-security-vulnerability-analyst-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nxp-principal-embedded-security-vulnerability-analyst-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnxp-principal-embedded-security-vulnerability-analyst-mfd"}]}