Software Security Architect - AI

Job Title

Software Security Architect - AI

Role Summary

Design and validate software security architectures for embedded systems and SoC platforms, with particular focus on AI security. Partner with product teams, security experts, and stakeholders to specify requirements, assess risk, and ensure security is integrated across the product lifecycle.

Experience Level

Mid-level. The posting does not state explicit years of experience.

Responsibilities

Support product development with architecture, analysis, and verification of security solutions. Key responsibilities include:

• Specify, design, review, and evolve system and software security architectures.
• Perform threat modeling, attack-surface analysis, and security risk assessments for embedded systems.
• Define security requirements and maintain traceability from objectives to implementation and verification.
• Integrate security-by-design principles across the product lifecycle and support Secure Development Lifecycle (SDL) activities.
• Analyze vulnerabilities, conduct root-cause analysis, and define mitigations.
• Define and review mechanisms such as secure boot, secure update, cryptographic services, key management, device identity, and root-of-trust.
• Translate regulations and standards into engineering requirements and support compliance evidence generation.
• Act as technical interface to customers, labs, and cross-functional teams; drive adoption of security best practices.

Requirements

Must-have technical skills and experience:

• Proven background in cybersecurity and software security architecture for embedded systems.
• Hands-on embedded software development experience in C, Rust, and/or assembly.
• Demonstrable experience in AI security (explicit requirement).
• Strong understanding of SoC software stacks, middleware, firmware, operating systems, and applications.
• Experience with threat modelling and security risk assessment.
• Familiarity with secure-boot, secure update, firmware protection, cryptography, key management, device identity, and root-of-trust concepts.
• Strong analytical, communication, and stakeholder-management skills; able to work independently and in global teams.

Nice-to-have / preferred:

• Experience with product security in automotive, industrial, or IoT domains.
• Experience with product security compliance and certification frameworks (e.g., PSA Certified, SESIP, Common Criteria) and regulations such as the Cyber Resilience Act (CRA).
• Vulnerability management, penetration testing, hardware/software co-design, and SDL practice experience.

Education Requirements

Master's degree, PhD, or equivalent experience in Computer Science, Cybersecurity, Software Engineering, Electronics, Mathematics, or a related technical field. The posting also references relevant security certification frameworks (PSA Certified, SESIP, Common Criteria) and allows equivalent practical experience as an alternative to academic degrees.

About the Company

Company: NXP Semiconductors

Headquarters: Nijmegen, Netherlands

NXP Semiconductors N.V. is a global semiconductor company that provides High Performance Mixed Signal and Standard Product solutions. With over 45,000 employees and operations in more than 35 countries, NXP is a leader in secure connectivity solutions for embedded applications, catering to automotive, industrial IoT, mobile, and communication infrastructure markets. The company is committed to innovation and sustainability, advancing a smarter, safer, and more sustainable world through technology.