Senior Principal Embedded Systems Security Architect

About the role

NXP is hiring a Senior Principal Embedded Systems Security Architect within its Competence Center Crypto & Security (CC C&S), in the SoC/IC Security Engineering team in Shanghai (Pudong). The role defines and validates the security foundations of future products, working with security experts, architects, cryptographers and hardware designers to protect billions of connected devices used in automotive, industrial, mobile, identification, payment and IoT applications.

Key responsibilities

• Drive security architecture and security-by-design approaches for advanced SoCs and secure embedded systems.
• Define security requirements and turn them into hardware, firmware and software security mechanisms.
• Assess and challenge security architectures to find weaknesses before products reach the market.
• Lead threat modeling, risk assessments and vulnerability analyses across the product lifecycle.
• Investigate security vulnerabilities and drive root-cause analysis of security issues.
• Partner with global product development teams, security architects, customers and certification labs.
• Contribute to next-generation security features and secure IP blocks, and support security certifications and compliance with international standards.
• Mentor engineers on secure design principles, verification methodologies and emerging threats.

Required profile

• Master's degree or PhD in Electrical Engineering, Computer Engineering, Computer Science, Cybersecurity or a related field.
• Strong understanding of SoC, IC or embedded system architectures.
• Experience with embedded system design and secure hardware/software interaction.
• Understanding of security principles and secure development methodologies.
• Strong analytical and problem-solving skills, and excellent communication in an international environment.

Required skills

• Security architecture for embedded or semiconductor products
• Cryptography and cryptographic implementations
• Hardware security mechanisms, side-channel analysis and fault injection/fault attack mitigation
• Secure boot, root of trust, key management and secure provisioning
• Vulnerability assessment and penetration testing of embedded systems
• Hardware description languages (SystemVerilog, Verilog, VHDL)
• Security verification and validation methodologies