{"id":3394738,"url":"https://alion.io/job/nxp-semiconductors-product-security-incident-response-program-manager-mfd","title":"Product Security Incident Response Program Manager (m/f/d)","company":{"id":17368,"name":"NXP Semiconductors","domain":"nxp.com","url":"https://alion.io/company/nxp","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":174,"ghost_share":0,"stale_share":0.632,"repost_share":0,"time_to_fill_p50_days":44,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gratkorn, Austria","Bucharest, Romania","Glasgow, United Kingdom","Spain"],"countries":["AT","RO","GB","ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":47000,"max_usd":114000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"Scrum","optional":false}],"status":"live","first_seen_at":"2026-10-28T11:58:27Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T05:09:35Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"As a member of NXP’s Product Security Incident Response Team, you will lead the operational response to reported vulnerabilities affecting NXP hardware and software products. You will own and drive security cases from initial intake through assessment, remediation coordination, customer communication, and responsible disclosure.\nThis position focuses on program leadership, case management, stakeholder coordination, communication, and continuous improvement. You will bring together engineering, product management, quality, legal, communications, customer-facing teams, and external researchers to ensure that security issues progress toward a timely resolution.\nWhat you'll do: A snapshot of your key responsibilities and impact.\nOwn the operational lifecycle of product vulnerability cases from intake through closure and disclosure.\nEstablish the response plan, milestones, ownership, dependencies, escalation path, and communication cadence for each assigned case.\nCoordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing organizations.\nTrack decisions, evidence, approvals, outstanding actions, and delivery risks.\nFacilitate vulnerability review meetings and drive actions to completion.\nCoordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and relevant external organizations.\nManage CVE reservation and publication workflows in coordination with technical subject-matter experts.\nCoordinate the creation, review, approval, and publication of security advisories and customer communications.\nImprove PSIRT procedures, templates, governance, and audit readiness.\nSupport readiness for upcoming regulations such as the EU Cyber Resilience Act (CRA), future standards and vulnerability-reporting obligations.\nWhat you'll bring:\n Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, vulnerability management or technical engineering programs.\n3 + years of relevant work experience\nStrong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.\nAbility to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.\nDemonstrated ability to coordinate complex investigations involving multiple technical and business organizations.\nStrong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting.\nExcellent communication skills and a passion for protecting innovative technology at scale.\nFamiliarity with embedded products, semiconductor products, firmware, automotive, industrial, or IoT environments is advantageous.\nPMP, PgMP, Scrum Master, SAFe, or other project/program management certifications are preferred, but not required.\nFluent in English\nPlease note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.\nFor applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung“, this position (fulltime) is graded in Employment Group V. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.\n More information about NXP in Austria...\n#LI-f5d0","description_format":"text","description_chars":3838,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule","Home office"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Processors, MCUs & AI Chips","RF & Wireless Hardware","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-10-28T11:58:27Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":44,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/nxp-semiconductors-product-security-incident-response-program-manager-mfd","json_url":"https://alion.io/job/nxp-semiconductors-product-security-incident-response-program-manager-mfd.json","meta":{"generated_at":"2026-10-30T08:03:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11338,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17368},"rest":"https://alion.io/mcp/rest/get_company?id=17368"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnxp-semiconductors-product-security-incident-response-program-manager-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnxp-semiconductors-product-security-incident-response-program-manager-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnxp-semiconductors-product-security-incident-response-program-manager-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nxp-semiconductors-product-security-incident-response-program-manager-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnxp-semiconductors-product-security-incident-response-program-manager-mfd"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3394738}},{"tool":"search_jobs","arguments":{"company":"nxp.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3394738},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}