At a Glance
- Tasks: Conduct cybersecurity assessments and deliver risk analysis for innovative vehicle technologies.
- Company: Leading consultancy in product cybersecurity with a focus on cutting-edge vehicle systems.
- Benefits: Competitive pay, hybrid work model, and potential for contract extension.
- Other info: Opportunity to work on impactful projects with excellent career growth potential.
- Why this job: Join a dynamic team tackling real-world cybersecurity challenges in the automotive sector.
- Qualifications: Experience in TARAs and embedded systems; strong documentation skills required.
The predicted salary is between 45000 - 55000 £ per year.
Contract Product Cybersecurity Engineer (TARA)
Location: Hybrid on-site in Surrey for workshops/design sessions
Duration: Initial 3 Months with potential to extend to 6 Months
Rate: TBC based on experience, Outside IR35 status determined by the engaging consultancy
Right to work: UK right to work without sponsorship required. No security clearance needed.
The Role
A specialist product cybersecurity consultancy is looking for additional delivery capacity on an in-flight EU Cyber Resilience Act conformity programme for a UK manufacturer of specialist commercial vehicles. Five ISO/SAE 21434 threat analysis and risk assessments (TARAs) are in scope across three product lines, including CAN-based vehicle controllers with 4G telematics and a connected fleet-management product on an embedded Linux platform.
The method, templates, governance framework and client relationship are already established and owned by the consultancy's Product Security Architect. This role is delivery capacity within that method not a review, re-baseline or redesign of the approach.
Deliverables
- TARAs to ISO/SAE 21434 for assigned product lines, from item definition and asset identification through damage scenarios, threat scenarios, attack path analysis, attack feasibility rating and risk determination, to a documented risk treatment decision
- Derived, testable and traceable cybersecurity requirements
- Cybersecurity assumptions/interface requirements for third-party platform components
- Contribution to the cybersecurity case for assigned product lines
- Facilitation of technical workshops with client engineering, with written outputs
- All work is subject to independent QA before it reaches the client.
Essential Criteria (must be evidenced, not just listed)
- Personally authored at least two completed TARAs to ISO/SAE 21434, item definition through to risk treatment decision and residual risk acceptance, on a product that reached production or formal assessment
- Fluent in the assessment structure: damage scenarios, impact rating, threat scenarios, attack paths, attack feasibility, risk determination, treatment
- Applied a named attack feasibility approach and can justify it over alternatives
- Authored or materially contributed to a cybersecurity case
- Embedded/vehicle systems literacy: ECUs, CAN networks, telematics units, software update paths, embedded Linux
- Derived cybersecurity requirements and passed them to a supplier/integrator, including handling unverifiable third-party platform assumptions
- Facilitated technical workshops with engineers who were not the requesting party
- Assurance-grade written English (documentation that has withstood audit/assessment/regulator scrutiny)
Desirable
- UNECE R155 CSMtGuard, Ansys medini analyze, itemis SECURE, ThreatGet or comparable
- IEC 62443 alongside 21434
- Off-highway, agricultural, construction, municipal or other specialist vehicle sector experience
- Working knowledge of Yocto/emS development, submission or audit exposure
- TARA tooling: Threabedded Linux build systems
- Functional safety experience alongside cybersecurity
- EU Cyber Resilience Act awareness
What this role is NOT
- Not security architecture, Zero Trust or design authority
- Not enterprise, cloud, identity or infrastructure security
- Not CISO, virtual CISO or governance/management-system work
- Not embedded OS implementation (Yocto, kernel config, secure boot, hardening sit with the client's integrator) this role specifies and assures, it does not build
If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
Product Cybersecurity Engineer (TARA) in London employer: All The Top Bananas
My Four Wheels is an exceptional employer, offering a rewarding career as a Trainee Driving Instructor with flexible working hours and the potential to earn up to £50,000+ annually. With comprehensive training provided through our new Training Academy, employees benefit from ongoing support and resources, ensuring a fulfilling journey towards becoming a qualified instructor while enjoying the satisfaction of teaching locally in Westfield, Surrey.
StudySmarter Expert Advice🤫
We think this is how you could land Product Cybersecurity Engineer (TARA) in London
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like All The Top Bananas.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like All The Top Bananas.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like All The Top Bananas.
We think you need these skills to ace Product Cybersecurity Engineer (TARA) in London
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives All The Top Bananas a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at All The Top Bananas; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at All The Top Bananas.
How to prepare for a job interview at All The Top Bananas
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with All The Top Bananas for the Product Cybersecurity Engineer (TARA), be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at All The Top Bananas.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Product Cybersecurity Engineer (TARA) role at All The Top Bananas.
