Software Security Architect - Cyber Resilience Act (CRA)

Job Title

Software Security Architect - Cyber Resilience Act (CRA)

Role Summary

Design and verify software security architectures for embedded products, supporting product teams from requirements through implementation and verification. Work within the Competence Center Crypto & Security to enable secure products across automotive, industrial, IoT, mobile, and edge markets.

Primary responsibilities include threat analysis, security risk assessment, defining security requirements, and supporting compliance with regulations such as the Cyber Resilience Act (CRA).

Experience Level

Mid-level (no specific years of experience stated). Candidates are expected to have substantial practical experience in embedded software security and architecture.

Responsibilities

Key responsibilities include technical leadership of software security activities across the product lifecycle:

• Specify, design, review, and evolve system software security architectures and implementations.
• Conduct threat modeling, attack-surface analysis, and security risk assessments for embedded systems and platforms.
• Define security requirements and maintain traceability from objectives to implementation and verification.
• Integrate security-by-design principles across development, verification, and maintenance phases.
• Support secure development lifecycle activities: architecture reviews, security assessments, and verification.
• Analyze vulnerabilities, perform root-cause analysis, and define mitigations and countermeasures.
• Define and review mechanisms: secure boot, secure update, cryptographic services, key management, device identity, and root-of-trust solutions.
• Translate standards and regulatory requirements into engineering requirements and support compliance evidence generation.
• Act as technical interface to customers, evaluation labs, compliance experts, and product teams.
• Promote and drive adoption of security best practices across projects and product lines.

Requirements

Must-have skills and experience (education items are summarized separately under Education Requirements):

• Strong background in cybersecurity and software security architecture.
• Extensive embedded software development experience in C, Rust, and/or assembly.
• Deep understanding of SoC software stacks, middleware, firmware, operating systems, and applications.
• Experience with threat modeling, security risk assessment, and secure system design.
• Familiarity with secure-boot, firmware protection, secure update mechanisms, cryptography, key management, device identity, and root-of-trust concepts.
• Familiarity with cybersecurity regulations, standards, and certification schemes applicable to embedded and connected products.
• Strong analytical, communication, and stakeholder-management skills; able to work independently and in global, cross-functional teams.

Nice-to-have:

• Experience with product security for automotive, industrial, or IoT products.
• Familiarity with security certification frameworks (PSA Certified, SESIP, Common Criteria) and Secure Development Lifecycle (SDL) practices.
• Experience in vulnerability management, penetration testing, hardware/software co-design, or AI security.

Education Requirements

Master's degree or PhD, or equivalent practical experience, in Computer Science, Cybersecurity, Software Engineering, Electronics, Mathematics, or a related technical field. Preferred familiarity with security certification frameworks such as PSA Certified, SESIP, or Common Criteria.

About the Company

Company: NXP Semiconductors

Headquarters: Nijmegen, Netherlands

NXP Semiconductors N.V. is a global semiconductor company that provides High Performance Mixed Signal and Standard Product solutions. With over 45,000 employees and operations in more than 35 countries, NXP is a leader in secure connectivity solutions for embedded applications, catering to automotive, industrial IoT, mobile, and communication infrastructure markets. The company is committed to innovation and sustainability, advancing a smarter, safer, and more sustainable world through technology.