As a member of NXP’s Product Security Incident Response Team, you will lead the operational response to reported vulnerabilities affecting NXP hardware and software products. You will own and drive security cases from initial intake through assessment, remediation coordination, customer communication, and responsible disclosure. This position focuses on program leadership, case management, stakeholder coordination, communication, and continuous improvement. You will bring together engineering, product management, quality, legal, communications, customer-facing teams, and external researchers to ensure that security issues progress toward a timely resolution. What you'll do: A snapshot of your key responsibilities and impact. Own the operational lifecycle of product vulnerability cases from intake through closure and disclosure. Establish the response plan, milestones, ownership, dependencies, escalation path, and communication cadence for each assigned case. Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing organizations. Track decisions, evidence, approvals, outstanding actions, and delivery risks. Facilitate vulnerability review meetings and drive actions to completion. Coordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and relevant external organizations. Manage CVE reservation and publication workflows in coordination with technical subject-matter experts. Coordinate the creation, review, approval, and publication of security advisories and customer communications. Improve PSIRT procedures, templates, governance, and audit readiness. Support readiness for upcoming regulations such as the EU Cyber Resilience Act (CRA), future standards and vulnerability-reporting obligations. What you'll bring: Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, vulnerability management or technical engineering programs. 3 + years of relevant work experience Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management. Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams. Demonstrated ability to coordinate complex investigations involving multiple technical and business organizations. Strong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting. Excellent communication skills and a passion for protecting innovative technology at scale. Familiarity with embedded products, semiconductor products, firmware, automotive, industrial, or IoT environments is advantageous. PMP, PgMP, Scrum Master, SAFe, or other project/program management certifications are preferred, but not required. Fluent in English Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary. For applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung“, this position (fulltime) is graded in Employment Group V. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more. More information about NXP in Austria... #LI-f5d0 NXP Semiconductors N.V. (NASDAQ: NXPI) enables a smarter, safer, and more sustainable world through innovation. As the world leader in secure connectivity solutions for embedded applications, NXP is pushing boundaries in the automotive, industrial & IoT, mobile, and communication infrastructure markets. For more information, visit www.nxp.com Bright Minds. Bright Futures. We believe that a key component to growing our business is to develop our people. To enable you to grow your career at NXP, we offer online and offline learning opportunities to help you develop some of your core and professional skills. Commitment At NXP. We recognize NXP is a powerful change agent as we continue to deliver innovative solutions that advance a more sustainable future. We remain steadfast in our commitment to sustainability and making measurable year-on-year progress. Also, we aim to create an inclusive work environment and we will not tolerate racism, discrimination or harassment of any kind. We have programs in place focused on diversity, inclusion and equality. Thank you for considering a career at NXP. To help you prepare for the different steps in our hiring process, see the following useful advice and tips. Are you already an NXP employee? Do not apply here. Instead, you must apply via our internal career page. Thank you for your interest in supporting our recruitment efforts. Please note that NXP operates under a strict Preferred Supplier List (PSL) for all recruitment activities. Any candidate profiles or resume submitted without a prior written agreement or explicit request from our Talent Acquisition team will be considered unsolicited. Such submissions will be deemed free of any obligations, and no fees will be paid by NXP or any of its affiliates, subsidiaries, or divisions - regardless of whether the candidate is hired, either coincidentally or otherwise. Thank you for your understanding.

Product Security Incident Response Program Manager (m/f/d).

more at nxp.com.

Sr . Principal Verification Engr

Principal Digital Design Engineer - MCU

Data Integration engineer

similar roles.

Senior Audit Project Manager - Information Security

Security Control Center Operator

Public Safety Officer

Principal Security Domain Architect

Dynamics 365 Customization Specialist

Intermediate Cybersecurity Analyst