Product Cybersecurity & Embedded Systems Security Engineer

LGM North America; Montreal; On-site; CAD 90,000 - 130,000; Full time

Job summary

LGM North America is seeking a Product Cybersecurity Engineer to support clients in designing, developing and maintaining secure products and systems. You will help integrate cybersecurity across the product lifecycle, collaborating with systems, software, hardware, validation and functional safety teams.

Key duties include planning cybersecurity activities, performing TARA, defining goals, reviewing architectures, and coordinating with suppliers to ensure compliance with cybersecurity

Qualifications

• Bachelor’s degree in computer, software, electrical or systems engineering, or a related discipline.
• Relevant experience in product cybersecurity, embedded systems security or industrial systems security.
• Ability to assess complex architectures, interfaces and attack surfaces.
• Experience in risk assessment, threat modelling and cybersecurity requirements development.
• Knowledge of ISO/SAE 21434 and IEC 62443 (parts 4-1/4-2).
• Sound understanding of communication protocols, embedded operating systems and applied cryptography.

Responsibilities

• Plan product cybersecurity activities and define project deliverables.
• Perform Threat Analysis and Risk Assessment (TARA), identify attack scenarios and mitigate risks.
• Define cybersecurity goals and allocate them to system, software and hardware components with traceability.
• Participate in architecture and design reviews to embed security principles.
• Determine or assess protection mechanisms.
• Support development teams in applying secure development practices and assessing third-party and open-source components.
• Describe cybersecurity verification and validation activities, assess test results and track corrective actions.
• Evaluate vulnerabilities and the security impact of product changes, and support risk treatment.
• Review supplier deliverables and prepare analyses, reports and evidence demonstrating cybersecurity compliance.
• Coordinate cybersecurity and functional safety interfaces to ensure consistent protection measures.

Skills

Threat modelling

Risk assessment

Cybersecurity requirements development

Architecture assessment

Independent work

Multidisciplinary teamwork

Analytical skills

Vulnerability management

Education

Bachelor’s degree in computer, software, electrical or systems engineering

Job description

The mission of the LGM Group is to design unique innovative solutions (products, organizational, or technological) for large industrial groups, aiming to enhance the performance of large complex systems and infrastructures during operational and maintenance phases.

LGM Group is the historical entity of the Group, where everything started more than 30 years ago. Today, LGM comprises approximately 1500 employees, both in France and internationally, who analyze, optimize, and manage the design, operation, and maintenance of complex systems.

We are looking for a Product Cybersecurity Engineer to support its clients in designing, developing and maintaining secure products and systems. You will help integrate cybersecurity throughout the product lifecycle, working closely with systems, software, hardware, validation and functional safety teams.

• Plan product cybersecurity activities and define project deliverables.
• Perform Threat Analysis and Risk Assessment (TARA), identify attack scenarios and recommend risk mitigation measures.
• Define cybersecurity goals and requirements, allocate them to system, software and hardware components, and maintain traceability.
• Participate in architecture and design reviews to embed security principles.
• Determine or assess protection mechanisms.
• Support development teams in applying secure development practices and assessing third-party and open-source components.
• Describe cybersecurity verification and validation activities, assess test results and track corrective actions.
• Evaluate vulnerabilities and the security impact of product changes, and support the treatment of residual risks.
• Review supplier deliverables and prepare analyses, reports and evidence demonstrating compliance with cybersecurity requirements.
• Coordinate cybersecurity and functional safety interfaces to ensure consistent protection measures.
• Bachelor’s degree in computer, software, electrical or systems engineering, or a related discipline.
• Relevant experience in product cybersecurity, embedded systems security or industrial systems security.
• Ability to assess complex architectures, interfaces and attack surfaces.
• Experience in risk assessment, threat modelling and cybersecurity requirements development.
• Knowledge of one or more applicable standards, depending on the industry:
  • ISO/SAE 21434: cybersecurity engineering for road vehicles.
  • IEC 62443, particularly Parts 4-1 and 4-2: secure development and security requirements for industrial components.
• Sound understanding of communication protocols, embedded operating systems and applied cryptography principles.
• Strong analytical skills, attention to detail and the ability to work independently and with multidisciplinary teams.