Senior Product Cybersecurity Architect

Role Description

The Safety & Regulatory – Product Cybersecurity team is responsible for ensuring the security, integrity, and resilience of Torc’s autonomous vehicle platform across the full product lifecycle. As a Senior Product Cybersecurity Architect, you will play a key role in embedding cybersecurity into the foundation of our autonomous driving systems. You’ll work closely with Compute Platform and Autonomy teams to develop cybersecurity elements of the Torc Safety Case and ensure security is built into our systems from conception through deployment. This role requires a deep understanding of product cybersecurity principles, a proactive approach to building cybersecurity in, and the ability to work cross-functionally with various departments to integrate robust cybersecurity measures into our products.

What You’ll Do

• Define and evaluate the implementation of cybersecurity controls, including but not limited to, embedded operating system, encryption, access controls, network security, middleware, and secure coding practices.
• Specific hands-on knowledge with implementation of cybersecurity embedded operating systems, networking, and cryptographic controls (e.g. securing embedded Linux, QNX, Ethernet, cellular telematics).
• Conduct, with a cross-functional team, process activities to define requirements, find design deficiencies, detect implementation defects, verify the product’s cybersecurity posture, and otherwise secure Torc’s products.
• Collaborate with product development teams to embed security into their design and development lifecycle of products and other software development activities.
• Stay abreast of emerging cybersecurity threats and technologies and continuously update our software security approaches, strategies, and solutions accordingly.
• Liaise with external security vendors and partners, managing relationships, and ensuring the effective integration of third-party security solutions.
• Prepare and present evidence in the cybersecurity case to demonstrate readiness to launch new products or release new software versions from a cybersecurity perspective.
• Train internal stakeholders on security practices and act as a resource where expert cybersecurity assistance is needed.

Qualifications

• 5+ years of experience hands-on engineering with safety-critical, cyber-physical systems (automotive, aerospace, medical).
• Bachelor's or Master's degree in computer science, electrical engineering, or related technical field plus demonstrated competences and technical proficiencies typically acquired through 6+ years of experience.
• Strong understanding of cybersecurity principles and practices for embedded, automotive, and autonomous systems.
• Must have strong demonstrated working usage of embedded operating systems (Linux, QNX, AUTOSAR) and embedded networking.
• Proficiency in recognizing software/hardware weaknesses security vulnerabilities and documentation through Threat Modeling.

Bonus Points

• Experience in the autonomous vehicle industry, particularly with L4 self-driving technology.
• Experience with embedded automotive systems and embedded threat modeling.
• Experience with Classic AUTOSAR.
• Knowledge of cybersecure development lifecycles such as the Microsoft SDL, ISO 21434, AVCDL, or similar.

Benefits

• A competitive compensation package that includes a bonus component and stock options.
• 100% paid medical, dental, and vision premiums for full-time employees.
• 401K plan with a 6% employer match.
• Flexibility in schedule and generous paid vacation (available immediately after start date).
• AD+D and Life Insurance.