Cyber Security Engineer

About the role

We are looking for a Cyber Security Engineer to lead the Threat Analysis and Risk Assessment (TARA) process for automotive projects. You will define security goals, guide cross‑functional teams, and ensure compliance with UN R155/R156 regulations.

Key responsibilities

• Lead TARA analysis using ISO/SAE 21434 methodology (e.g., STRIDE) to identify assets, attack vectors, and threat scenarios.
• Translate TARA results into traceable network security requirements covering hardware, software, and system levels.
• Design and implement security mechanisms such as Secure Boot, Secure OTA/Diagnostic Update, HSM integration, Secure Debug, and Secure Logging.
• Collaborate with testing teams to create verification plans, including fuzz testing, penetration testing, and vulnerability scanning.
• Evaluate security capabilities of supplier components (MCUs, HSMs, communication modules) and review their compliance documentation.
• Support the PSIRT process for vulnerability impact assessments and incident response.

Required profile

• Bachelor’s degree or higher in Computer Science, Information Security, Electronic Engineering, Vehicle Engineering, Automation or related fields.
• Minimum 3 years of experience in network or information security for automotive electronics, industrial control, or embedded systems.
• At least one full lifecycle project from TARA analysis to mass‑production SOP.
• Deep knowledge of ISO/SAE 21434 and UN R155/UN R156 regulatory frameworks.
• Familiarity with TARA tools such as Medini Analyze and PTC Integrity.

Required skills

• ISO/SAE 21434 standard
• UN R155 & UN R156 compliance
• TARA analysis (STRIDE model)
• Secure Boot, Secure OTA/Diagnostic Update
• HSM integration, Secure Debug, Secure Logging
• Fuzz testing, Penetration testing, Vulnerability scanning
• Medini Analyze, PTC Integrity