International Association
for Cryptologic Research

• Software security assessment of SoC/IC security architectures and security scope specifications

• Plan, track and execute process, specification as well as software implementation reviews

• Assessment of software security robustness and effectiveness of security mechanisms

• Work with engineering teams and security engineers to innovate solutions to security-related problems

• Manage the NXP’s software secure development lifecycle (SSDLC) applied on product developments to minimize security risks

• Work on continuous improvements to keep up with state-of-the-art security technologies

• Refine software security best practices to assure and efficient and effective application

• Provide consultation on specific areas of security expertise and on the application of the SSDLC

To ensure your successful performance in this role, the following is desired

• Finished a BSEE or MSEE preferred in Security Engineering or Software Engineering

• Have good understanding of embedded software design, programming, documentation, and testing

• Have experience in the design and development of secure software, focus on embedded systems or complete solutions

• Have experience in the security concept/design, thread analysis, risk/threat modelling and mitigation strategies

• Have professional knowledge of software languages (C, Java, Java Card, Python, Rust)

• Knowledge of security compliance and certification processes would be an advantage

• Be familiar with "state of the art" software tools, CI/CD, secure software engineering processes, IoT solutions and service (depending on area of expertise)

• Have excellent communication skills, are willing to listen and adapt

• Are a collaborator with strong soft skills, ideally experienced in multicultural and global working environment