Security Engineer

• Define and drive the CRA compliance strategy for MCU and MPU product portfolios through the central security architecture team
• Ensure alignment with upcoming mandatory CRA requirements (target: 2027)
• Translate regulatory requirements into practical security controls, design principles, and architecture guidelines
• Support audit readiness (compliance documentation, security evidence generation and end to end traceability of requirements)
• Define, implement, and maintain robust security architectures across Legacy products & New Product Introductions (NPI)
• Ensure consistent application of security standards, methodologies, and best practices across product lines
• Collaborate with cross-functional teams (engineering, product management, compliance) to embed security into development processes
• Lead and conduct system-level threat modeling and threat analysis (hardware and software)
• Perform security risk assessments aligned with CRA expectations and industry standards

Software Security Architect – Cyber Resilience Act Focus

• Lead project teams and support the implementation of tailored Information Security Management strategies and solutions for various clients — remotely and on-site.
• Guide clients through the entire process, from conducting protection needs assessments and structural analyses to establishing complete Information Security Management Systems (ISMS).
• Design organizational and technical security solutions in demanding projects and support their implementation.
• Contribute ideas and proposals on interface topics (e.g., data protection, operational organization, service management) to further develop our consulting services.

Senior Consultant, Information Security and IT Security

• Analyze security risks in the IT environment and define concrete mitigation measures
• Participate in security projects such as MFA, Conditional Access, IAM, and penetration testing
• Collaborate with the IT infrastructure team and external partners to develop and improve security standards and processes
• Support incident management and deliver IT security training for new employees

IT Security Engineer

• Proactively contribute to the development of security policies and security concepts
• Define and operationalize security requirements for cloud and Kubernetes environments
• Support implementation of security measures in Azure and Kubernetes
• Coordinate security topics (e.g., measures from audits such as ISO)
• Integrate security into modern cloud architectures (DevSecOps)
• Collaborate with development and platform teams to increase security in practice

Security Engineer – Azure, Kubernetes

• Conducting and supporting security assessments and maturity analyses
• Advising clients on common cyber security standards (ISO 27001, NIST, ISF)
• Developing and implementing long-term security strategies together with the team
• Drafting, reviewing and optimizing security concepts and policies
• Building and maintaining client relationships as well as actively supporting business development

Junior Consultant Cyber Security, IS and Compliance

• Administer, maintain, and troubleshoot large-scale Linux environments (RHEL, CentOS, Ubuntu)
• Perform OS and kernel patching across production and non-production systems with minimal downtime
• Troubleshoot complex Linux issues, including boot failures, initramfs issues, filesystem corruption, OOM events, and performance degradation
• Perform deep-dive analysis of CPU, memory, disk I/O, and networking issues
• Handle production incidents, perform RCA, and implement permanent fixes
• Develop and maintain shell scripts for automation, health checks, and validations
• Collaborate closely with application, storage, and network teams
• Maintain documentation, runbooks, and patching procedures

IT Security Specialist, Infrastructure Compute – Linux

• Leite Projektteams und unterstütze bei der Implementierung maßgeschneiderter Information Security Management-Strategien
• Begleite unsere Kunden von der Durchführung von Schutzbedarfsfeststellungen über Strukturanalysen bis hin zum Aufbau von vollständigen Information Security Management-Systemen
• Konzipiere organisatorische und technische Sicherheitslösungen
• Bring Ideen und Vorschläge in Schnittstellenthemen ein (z.B. Datenschutz, Betriebsorganisation, Dienstleistungsmanagement) und entwickle so unsere Beratungsfelder weiter

Senior Consultant, Informationssicherheit, IT Security

• Apply your hacking skills through web, mobile app and infrastructure penetration tests or Red Teaming engagements—both remotely and on-site at client locations
• Explain test results in detailed project reports and persuade clients with recommendations to improve their IT security
• Tackle continuously new topics and learn current technologies; contribute to the development of internal tools or systems and explore new tactics, techniques and procedures (TTPs)
• Stay up to date through company-supported conferences, training, experiments, regular knowledge transfers, and joint internal CTF and Hack The Box sessions
• Gain exposure to adjacent areas such as Incident Response/Forensics or configuration audits
• Propose ideas for new projects and play a tangible role in building and expanding our client relationships

Senior Consultant, Penetration Testing

• Driving the security evaluation and certification for a secure product in the context of certification schemes like Common Criteria (CC), EMVCo, FIPS 140-3, SESIP, PSA, etc.
• Driving the definition of security certification schemes for emerging embedded security markets
• Driving the definition of product related security standards in public and private Standardization bodies
• Technical interface between internal teams and the technical evaluator of evaluation labs and certification bodies
• Liaising with external consultants and international working groups and legislators defining the security certification landscape
• Contributing to the technical certification and evaluation strategy for emerging businesses

Principal Product Security Certification Expert

• Driving the security evaluation and certification for a secure product (e.g. Secure Element, MCU, MPU) in the context of certification schemes like Common Criteria (CC), EMVCo, FIPS 140-3, SESIP, PSA, ETSI EN 303 645, NIST 8259, etc.
• Assessing security compliance for a secure product (e.g. Secure Element, MCU, MPU) in the context of secure development standards like ISO/SAE 21434, IEC 62443-4-1, or emerging cybersecurity regulations like EU Radio Equipment Directive, EU AI Act, or EU Cyber Resilience Act
• Driving the definition of security certification schemes for emerging embedded security markets (e.g. IoT, Automotive, etc.)
• Contributing to the definition of product related security standards in public and private Standardization bodies like ISO, SAE, CEN/CENELEC, ETSI, GlobalPlatform, GSMA
• Technical interface between internal teams like product security and design teams and the technical evaluator or auditor
• Liaising with external consultants and international working groups and legislators defining the security certification landscape
• Contributing to the technical certification strategy for emerging businesses

Principal Product and Process Security Certification Expert

• Lead project teams and support the implementation of tailored Information Security Management strategies and solutions for a variety of clients – remotely and on-site
• Guide our clients from conducting protection-needs assessments and structural analyses to building complete Information Security Management Systems (ISMS)
• Design organizational and technical security solutions in complex projects and support their deployment
• Contribute ideas and proposals on cross-functional topics (e.g., data protection, operational organization, service management) and help further develop our consulting offerings

• Apply your hacking skills through web, mobile app, and infrastructure penetration tests or red teaming engagements — both remotely and on-site at client locations
• Explain test results in detailed project reports and persuade clients to improve their IT security through remediation recommendations
• Continuously take on new topics and learn current technologies; contribute to the development of internal tools or systems and explore new tactics, techniques and procedures (TTPs)
• Stay up to date through company-supported conferences, training, experiments, regular knowledge-sharing, and joint internal CTF or Hack The Box sessions
• Gain exposure to adjacent areas such as incident response/forensics or configuration audits
• Propose ideas for new projects and make a tangible contribution to building and expanding our client relationships

• Conduct technical security audits, assess current security measures, and produce reports with recommendations for improvement based on established best practices and practical experience
• Develop tailored security strategies and concepts — both remotely and on-site
• Provide advisory services on cybersecurity topics such as network security, cloud computing, identity and access management (IAM), detection and response (EDR/XDR/SIEM/SOC), virtualization, and more
• Support compliance with legal and regulatory requirements, e.g., ISO/IEC 27001, BSI IT-Grundschutz, NIS2, DORA

Senior Consultant, IT Security, Audits

• Drive end-to-end security analysis for NXP solutions, with a strong focus on product-spanning features, interactions, and interfaces
• Translate regulatory and certification requirements into robust, future-proof designs
• Evaluate the cost-benefit trade-offs of security mechanisms and articulate architectural choices with clarity, confidence, and customer perspective
• Analyze how different NXP technologies combine to create secure and seamless solutions
• Stay ahead of disruptive industry trends, including AI/ML, and explore the risks and opportunities they bring to the semiconductor security landscape

See all jobs on JobTailor

Software Security Architect – Cyber Resilience Act Focus

Senior Consultant, Information Security and IT Security

IT Security Engineer

Security Engineer – Azure, Kubernetes

Junior Consultant Cyber Security, IS and Compliance

IT Security Specialist, Infrastructure Compute – Linux

Senior Consultant, Informationssicherheit, IT Security

Senior Consultant, Penetration Testing

Principal Product Security Certification Expert

Principal Product and Process Security Certification Expert

Senior Consultant, Information Security and IT Security

Senior Consultant, Penetration Testing

Senior Consultant, IT Security, Audits

Senior System Security Architect