Job Description

Roles and Responsibilities

Being passionate and forward-thinking about cybersecurity and the needs for the ever-changing automotive industry

Network and maintain a high-level of industry knowledge (e.g. participation in Auto-ISAC events)

Support the more senior CSEs in defined areas

Be responsible for a feature from design to test to manufacturing
Be responsible for a specific subset of documents within one or multiple projects

Support cybersecurity risk assessments and threat modelling within a product scope

Understand and review countermeasures appropriate to the project given the technical constraints or operational limitations
Create and maintain a knowledge database of typical assets, threats and attack paths for our product portfolio to leverage re-use

Create and maintain solutions to manage cybersecurity risks

Engage with suppliers to evaluate cybersecurity capabilities and track reported vulnerabilities
Evaluate new tools (Threat Analysis tool, Software Bill Of Material tool…)
Be part of incident response teams

Support the roll-out of processes and procedures compliant with latest cybersecurity standards and regulations

Collect feedback from the team and suggest updates in the process model
Develop or update document templates and work instructions

Help the cybersecurity team in promoting a cybersecurity culture

Assist in training, organizing events
Work with IT and Information security teams to help define infrastructure and policies

Education, skills and experience

Bachelor degree in Computer Science, Software Engineering, Computer Engineering or equivalent degree
Ability to write fluently to describe design, theory and test results.
Ability to effectively communicate with peers, supervisors and suppliers or customers.
Ability to work both independently and within a team

Take ownership of project deliverables
Consider and seek out the impact of one’s actions within the team

Ability to work easily with Office software suite and engineering software (prior experience with simulation or analysis tools for instance).
Basic knowledge of cybersecurity is needed (security properties, encryption algorithms, keys/certificates/signatures concepts…)
Automotive, Aerospace or transportation development experience or internship is a plus, especially familiarity with automotive network architecture, modules, and protocols (CAN, Flexray etc.)
Familiarity with Secure Coding practices, processes and methods is a plus. This can include some understanding of the dangers of using C, MISRA and CertC if possible.