{"id":110884,"url":"https://alion.io/job/nxp-senior-embedded-security-vulnerability-analyst-mfd","title":"Senior Embedded Security Vulnerability Analyst (m/f/d)","company":{"id":17368,"name":"NXP Semiconductors","domain":"nxp.com","url":"https://alion.io/company/nxp","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":200,"ghost_share":0,"stale_share":0.92,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Leuven, Belgium","Austria"],"countries":["BE","AT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":72000,"max_usd":143000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"LLM","optional":false},{"name":"RTOS","optional":false},{"name":"Rust","optional":false}],"status":"live","first_seen_at":"2026-07-02T00:00:00Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-10-17T08:15:55Z","board_verified":true,"closed_at":null,"days_open":107,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":107},"description":"We are seeking a Senior Embedded Security Vulnerability Analyst to perform deep technical analysis of embedded systems, focusing on identifying and understanding vulnerabilities at the hardware/software boundary.\nYou will analyze low-level firmware, boot code, and system components to uncover exploitable weaknesses and work closely with development teams to drive secure designs. The role requires a strong systems mindset, curiosity for attack techniques, and the ability to reason about complex execution environments. You will also leverage and help shape modern analysis approaches, including AI-assisted vulnerability discovery workflows, to improve both depth and scalability of analysis.\nIf you are already exploring how LLMs and agentic workflows can augment deep code and system analysis, this role provides an opportunity to apply and advance these approaches in a real-world embedded security setting.\nWe welcome both:\nexperienced security researchers\n\nstrong embedded engineers with a demonstrated interest in transitioning into security\n\nYour Responsibilities\nPerform in-depth vulnerability analysis of embedded software (bare-metal, RTOS, trusted execution environments)\n\nAnalyze boot flows, privilege boundaries, and security-critical components (e.g., crypto libraries, key handling, isolation mechanisms)\n\nConduct root cause analysis and assess exploitability and impact of identified weaknesses\n\nSupport security certifications and evaluations (e.g., PSA, SESIP, Common Criteria)\n\nAnalyze PSIRT incidents and derive structural improvements\n\nDevelop and apply analysis methodologies and tooling (static analysis, fuzzing, scripting, automation)\n\nApply and evaluate AI-assisted techniques for code analysis and vulnerability discovery (e.g., LLM-based workflows)\n\nDesign and refine workflows that combine traditional analysis (static and dynamic) with AI-assisted approaches\n\nResearch and evaluate emerging attack techniques relevant to embedded systems\n\nCollaborate with development teams to translate findings into concrete mitigations\n\nEducation & Qualifications\nDegree in Electrical Engineering, Computer Science, Mathematics, or related field\n\nStrong understanding of low-level system behavior (memory layout, interrupts, privilege levels, concurrency)\n\nSolid experience in C programming; familiarity with ARM and/or RISC-V architectures\n\nExperience with assembly-level debugging and analysis\n\nStrong differentiators:\nExperience with vulnerability research, reverse engineering, or exploit development\n\nFamiliarity with static and dynamic analysis tools, fuzzing, or symbolic execution\n\nUnderstanding of common vulnerability classes (memory corruption, logic flaws, side channels)\n\nExperience with debugging interfaces (e.g., JTAG, trace, GDB)\n\nExperience using or evaluating AI-assisted code analysis or vulnerability discovery tools\n\nExperience building or integrating automated analysis workflows (e.g., scripting, pipelines, agent-based approaches)\n\nRust experience or interest in memory-safe system design\n\nYour Profile\nStrong analytical thinking and curiosity for how systems fail under adversarial conditions\n\nAbility to work independently and drive complex technical investigations\n\nInterest in combining deep technical analysis with modern AI-assisted techniques\n\nClear communication of technical findings and risks to diverse audiences\n\nCollaborative mindset when working with development and architecture teams\n\nPlease note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.\nFor applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung“, this position (fulltime) is graded in Employment GroupV. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.\n More information about NXP in Austria...\n#LI-a8a1","description_format":"text","description_chars":4363,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Home office"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IoT Security","Processors, MCUs & AI Chips","RF & Wireless Hardware","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-07-02T00:00:00Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.356,"p_room":0.28,"age_days":107,"expected_fill_days":34,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/nxp-senior-embedded-security-vulnerability-analyst-mfd","json_url":"https://alion.io/job/nxp-senior-embedded-security-vulnerability-analyst-mfd.json","meta":{"generated_at":"2026-10-17T19:40:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3103,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17368},"rest":"https://alion.io/mcp/rest/get_company?id=17368"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnxp-senior-embedded-security-vulnerability-analyst-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnxp-senior-embedded-security-vulnerability-analyst-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnxp-senior-embedded-security-vulnerability-analyst-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nxp-senior-embedded-security-vulnerability-analyst-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnxp-senior-embedded-security-vulnerability-analyst-mfd"}]}