Job Description
We are seeking a Cybersecurity Engineer to support automotive software and system development activities in compliance with ISO/SAE 21434 and UNECE R155 requirements.
The engineer will be responsible for cybersecurity analysis, threat assessment, risk management, and cybersecurity work products throughout the vehicle development lifecycle.
Responsibilities
- Perform cybersecurity activities in accordance with ISO/SAE 21434.
- Conduct Threat Analysis and Risk Assessment (TARA).
- Define and manage cybersecurity requirements for automotive systems and software.
- Develop cybersecurity work products including:
- Item Definition
- Cybersecurity Plan
- TARA
- Cybersecurity Concept
- Cybersecurity Case
- Cybersecurity Interface Agreement
- Identify cybersecurity risks and define mitigation strategies.
- Collaborate with system, software, and architecture teams to implement cybersecurity requirements.
- Support cybersecurity reviews, audits, assessments, and compliance activities.
- Participate in vulnerability analysis and cybersecurity validation activities.
- Ensure compliance with UNECE R155 and related automotive cybersecurity regulations.
Requirements
- Bachelor‘s degree in Computer Science, Electronics, Electrical Engineering, or related fields.
- 3+ years of experience in Automotive Cybersecurity, Systems Engineering, or Embedded Software.
- Strong knowledge of ISO/SAE 21434.
- Understanding of UNECE R155 and automotive cybersecurity processes.
- Experience in TARA (Threat Analysis and Risk Assessment).
- Knowledge of automotive communication protocols:
- CAN
- CAN-FD
- Automotive Ethernet
- UDS
- Familiarity with security mechanisms:
- Encryption
- Authentication
- Secure Boot
- HSM
- PKI
- Key Management
- Understanding of automotive architectures and ECU development.
- Experience with requirements management tools such as DOORS, Polarion, Jira, or similar.
- Good documentation and communication skills.
Preferred Skills
- Automotive SPICE knowledge.
- ISO 26262 Functional Safety awareness.
- AUTOSAR security modules (SecOC, Crypto Stack).
- Medini Analyze or cybersecurity assessment tools.
- Experience with connected vehicles, telematics, OTA, or cloud security.
- Experience working with OEMs or Tier-1 automotive suppliers.