Security Certifications & Compliance Engineer

About the role

We are seeking a Security Certifications & Compliance Engineer to join Nuvoton Israel’s hardware security team. The role focuses on ensuring our semiconductor products meet top‑tier security certifications and compliance frameworks while collaborating closely with engineering, customers and external certification bodies.

Key responsibilities

• Lead and support security certification programs such as Common Criteria (CC), FIPS 140‑3, CSPN, OCP SAFE and others.
• Drive compliance initiatives for the Cyber Resilience Act (CRA), Secure Development Lifecycle (SDL), NIST SSDF and customer‑specific security requirements.
• Coordinate with engineering teams, management, customers, certification labs and security experts throughout the certification lifecycle.
• Review development processes, project documentation and deliverables to ensure security readiness.
• Participate in threat modeling, risk assessments, security reviews and secure development activities.
• Prepare for and support internal and external audits, as well as customer security assessments.
• Maintain and improve the Corporate Development Security System, including asset classification and employee awareness programs.
• Produce and maintain certification documentation such as Security Targets, Security Policies, certification reports and lifecycle evidence.

Required profile

• B.Sc. in Computer Engineering, Electrical Engineering, Computer Science, Information Security or a related discipline.
• Minimum 5 years of experience in cybersecurity, product security, secure development, security compliance, security certifications or security audits.
• Background in the semiconductor industry is required.
• Strong understanding of cryptography fundamentals, secure development lifecycle, vulnerability management, threat modeling and hardware/embedded security.

Required skills

• Common Criteria (CC) and FIPS 140‑3 certification processes.
• TPM technologies, Root‑of‑Trust architectures, Secure Boot and Post‑Quantum Cryptography.
• Knowledge of the Cyber Resilience Act (CRA) and NIST security frameworks.
• Experience with security testing, penetration testing concepts and firmware/software security.