NXP Semiconductors
Product Security Vulnerability Response Manager - Embedded & Semiconductor Security (m/f/d)

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About the Role
This role is about ensuring the resilience of NXP products (Secure Chips rather than IT Systems) that are embedded in millions of automotive, industrial, IoT, mobile, and edge devices.
In this role, you will help protect products already deployed in the field, leading the response to security vulnerabilities, coordinating mitigation strategies, and strengthening customer trust throughout the post-production product lifecycle.
Working at the intersection of Product Security, Engineering, R&D, Customers, and External Security Researchers, you will drive the end-to-end lifecycle of vulnerability management, from initial disclosure through risk assessment, mitigation, and customer communication.
As a key member of NXP's Product Security Incident Response Team (PSIRT), you will lead the end-to-end response to security issues affecting NXP products already deployed worldwide. Partnering with engineering teams, customers, and security researchers, you will assess risk, coordinate remediation efforts, manage responsible disclosure, and help safeguard customer trust throughout the product lifecycle.
Our PSIRT is committed to rapidly addressing security threats in NXP products by investigating reported issues, evaluating their potential impact, and providing customers with timely and actionable guidance.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
See also www.nxp.com/psirt.
What You'll Do
- Lead the response and coordination of security vulnerabilities affecting NXP products, hardware and software.
- Drive vulnerability triage, impact assessment, severity classification, and prioritization.
- Collaborate with engineering and product teams to develop mitigation strategies and remediation plans.
- Coordinate responsible disclosure activities with external researchers, customers, and industry partners.
- Oversee security advisories, CVE processes, and customer communications.
- Act as a trusted advisor to product teams on vulnerability management and product security best practices.
- Continuously improve PSIRT processes, metrics, and operational excellence.
What You'll Bring
- Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, or Secure Product Development.
- Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
- Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.
- Excellent communication skills and a passion for protecting innovative technology at scale.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Understand Threats. Protect Products. Protect Customers. Lead Response. Reduce Risk. Build Trust. Drive Security. Create Impact. Shape Tomorrow.
For Austrian applicants
NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act, we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung“, this position (fulltime) is graded in Employment Group V. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.
More information about NXP in Austria... https://www.nxp.com/company/about-nxp/worldwide-locations/austria:AUSTRIA
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location