Cyber Security Engineer

Full-time

Description

At FEV North America, we work with technology new to the automotive industry and for future mobility solutions and help set the direction for companies when innovating new products and services. We have a strong emphasis on systems, software, hardware, and services that will help create the experiences and features of the future both inside the vehicle and in the cloud and on apps.

 

We are looking for a Cyber Security Engineer to help run vulnerability valuation and fizzing of protocols, hardware, and software for automotive applications. This role will be deeply involved with enabling innovative new development and processes in the approach and execution of highly technical systems and components for our customers. The ideal candidate brings experience and creativity to find efficient and effective solutions to the challenges that we face.

• Develop and maintain a cybersecurity plan to meet customer program timing 
• Create/review Item Definition and perform Threat Analysis and Risk Assessment (TARA) as per ISO/SAE 21434 and OEM cybersecurity process
• Define Cybersecurity Concepts and Security Goals during concept and development phases
• Derive and document Cybersecurity Requirements at vehicle, system, and component levels
• Support the design of Cybersecurity Architecture, including trust boundaries, data flows, and control mechanisms
• Identify and define appropriate Security Controls aligned with identified threats
• Support vehicle type approval process (R155/R156)
• Define and perform verification and validation testing (including fuzz testing and penetration testing) 
• Support cybersecurity reviews, process audits and cybersecurity assessments. 

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Security & Assurance, Information Technology, or related field required. 
• 1-5 years of automotive cybersecurity, vehicle electronics, embedded systems, IT security, or related cybersecurity domains.
• Understanding of end-to-end connected vehicle (telematics and infotainment) and wired/wireless communication protocols (CAN, J1939, CAN-FD, UDS, Flex-ray, Ethernet, Bluetooth, Wi-Fi etc.). 
• Experience in addressing vehicle development (E/E architectures, embedded and systems engineering) and automotive cybersecurity challenges (e.g., security by design, secure boot, control unit, and vehicle network protection). 
• Knowledge of standards like ISO/SAE 21434 and UNECE WP.29 R155/R156 Regulations. 
• Experience ISO/SAE 21434-based processes for TARA, concept development, and testing. 
• Experience in development of high-level and low-level test plans and test methods along with executing the test cases manually on a subsystem level desktop bench and ability to automate the test cases with Bash and Python scripts. 
• Good understanding about communication functions among all the layers in OSI Model. 
• Familiarity with securing embedded platforms, including embedded Linux (SELinux, Yocto/Debian hardening), RTOS, secure boot, and HSM/secure elements. 
• Familiarity with cybersecurity frameworks such as Auto-ISAC ATM, MITRE ATT&CK, MITRE EMB3D, PTES, and NIST 800-115 

Preferred Qualifications:

• Working knowledge of IEC 62443 standard series
• Working experience of software coding in C, C++, and python.
• Knowledge on vehicle cybersecurity standard SAE J3061.
• Knowledge over HSM module, Key-provisioning, securing mobile apps, know-hows about tampering and reverse engineering techniques.
• Experience in AUTOSAR software development or integration projects.
• Deep understanding of OS and Kernel architecture (e.g., QNX, Linux, Android etc.)
• Working experience in using any open-source testing tools like Ncat, Metasploit and Wfuzz etc. along with Kali-Linux utilities.
• Expert level understanding of TCP/IP networking, routing protocols and full packet capture analysis using tools like Wire-shark.
• Hands-on experience in penetration testing, fuzz testing tools and product security/deployment. 
• Cyber security certifications such as EC-Council CEH, SANS GIAC, and Offensive Security OSCP.
• Ability to handle tasks with significant complexity under minimal supervision requiring a high degree of technical competence.
• Ability to interact dynamically with cross-functional global teams. 
• Ability to present and speak to customers along with working at customer site to deliver engineering services in alignment with customer process and procedures.