We are seeking an Automotive Cybersecurity Expert to support the development of secure vehicle systems, embedded products and connected automotive technologies. You will act as a key cybersecurity interface between systems, software, hardware, validation, functional safety, quality, customers and suppliers. Your role will be to define and address product cybersecurity risks throughout the automotive development lifecycle, ensuring alignment with ISO/SAE 21434 and applicable regulatory requirements. You will provide specialist guidance during the concept, architecture, design, implementation, verification and post-development phases, ensuring that cybersecurity risks are identified, appropriately treated and supported by clear, auditable engineering evidence.
Key Responsibilities
- Act as a subject-matter expert for automotive product cybersecurity across engineering programmes.
- Plan and coordinate cybersecurity activities in accordance with ISO/SAE 21434.
- Support item definition, cybersecurity planning, tailoring and interface-agreement activities.
- Conduct and review Threat Analysis and Risk Assessments, including asset identification, attack-path analysis, impact assessment and risk determination.
- Define cybersecurity goals, claims, concepts, requirements and risk-treatment measures.
- Support the development and review of secure vehicle, system, software and hardware architectures.
- Translate identified cybersecurity risks into clear and testable engineering requirements.
- Advise engineering teams on appropriate cybersecurity controls, including secure boot, authentication, encryption, key management, access control, secure diagnostics and secure communications.
- Support cybersecurity verification and validation, including vulnerability analysis, penetration testing, fuzz testing and requirements-based testing.
- Evaluate cybersecurity vulnerabilities and support incident response, remediation and coordinated vulnerability management activities.
- Produce and maintain cybersecurity work products, traceability records and evidence supporting the cybersecurity case.
- Perform cybersecurity reviews and assessments to confirm compliance with project plans, organisational processes and ISO/SAE 21434.
- Support the integration of cybersecurity with systems engineering, functional safety, software, hardware and validation processes.
- Define, communicate and manage cybersecurity requirements for suppliers and third-party components.
- Assess supplier cybersecurity capabilities, development plans, technical solutions and compliance evidence.
- Support customer, supplier, assessor and regulatory discussions relating to product cybersecurity.
- Contribute to post-development activities, including vulnerability monitoring, cybersecurity event analysis and incident response.
- Help develop and improve organisational cybersecurity processes, templates, methods and guidance.
- Promote cybersecurity awareness and provide technical coaching to engineering and programme teams.
Requirements
- Degree in Cybersecurity, Software Engineering, Electronic Engineering, Systems Engineering, Computer Science or a related discipline.
- Strong practical knowledge of ISO/SAE 21434 and its application within automotive product development.
- Proven experience delivering cybersecurity engineering activities across the automotive product lifecycle.
- Strong experience conducting and reviewing Threat Analysis and Risk Assessments.
- Experience defining cybersecurity concepts, goals, claims, requirements and controls.
- Good understanding of automotive electrical and electronic architectures, embedded systems and electronic control units.
- Knowledge of automotive communication technologies and protocols, such as CAN, CAN FD, LIN, Automotive Ethernet, UDS and DoIP.
- Understanding of common automotive attack vectors and appropriate technical countermeasures.
- Experience with cybersecurity technologies such as hardware security modules, secure boot, secure flashing, cryptography, authentication, intrusion detection and key management.
- Knowledge of vulnerability management, incident handling, system hardening and secure development principles.
- Experience producing clear, traceable and audit-ready cybersecurity documentation.
- Familiarity with UNECE R155 and automotive Cybersecurity Management Systems.
- Awareness of UNECE R156, software-update management and secure over-the-air update processes.
#J-18808-Ljbffr
