Cyber Security System Architect

AutoSec Innovation; Aachen; Vor Ort; EUR 70.000 - 100.000; Vollzeit

Zusammenfassung

AutoSec Innovations seeks a senior cybersecurity specialist for embedded systems to analyze, create, and deliver cyber security solutions. You will support the cybersecurity manager and align technical requirements with customers and suppliers from concept to end-of-life, acting as the main technical cyber security guru on projects.

Responsibilities include leading cyber security work products, reviewing requirements, risk analyses, and ensuring thorough testing and validation across development

Qualifikationen

• Engineering degree in Computer Science, Information Systems, mechatronics, embedded systems, or the equivalent, with experience, preferably in the automotive industry (cyber security degree is a plus).
• Strong Knowledge of cryptographic algorithms and protocols (AES, PKI, CMAC, SHA-256, ECDSA etc.), and its implementation in an automotive dev environment.
• Strong knowledge of the Infineon Aurix family and its HSM components and their relevant drivers, SW stack, features and basic HW design.
• Some Knowledge in communication stack on different levels such as XCP, UDS, CAN, CAN FD, Flexray, LIN, A-Ethernet, and low level protocols such as SPI, I2C etc…
• Hands on experience in embedded SW development in Automotive, especially in low level SW implementation, CPU configuration, debugging with strong analysis suit.
• Basic Knowledge of the reference (product specific) product standards and customer requirements (e.g., ISO/SAE 21434; ISO 24089; IEC 62443; OWASP; Major OEMs standards for cyber security, AUTOSAR).
• Experience in powertrain development, Hybrid and EVs.
• Excellent English, spoken and written, as this is the main work language.

Aufgaben

• Provide high technical cyber security support for the development teams.
• Lead, create, Review the cyber security technical work products on the project level (e.g TARA, Security Concept).
• Own, manage and review the relevant Cybersecurity requirements for the projects throughout the complete life cycle from concept phase until decommissioning.
• Complete Requirements review, Validation review, and other cyber security work products review.
• Follow up and ensure full cybersecurity testing and validation, with on-hand support.
• Perform needed analysis to determine potential technical approaches for new and improved state-of-the-art product cybersecurity solutions.
• Execute product security-related risk analysis while contributing to general risk management topics.
• Analyze vulnerabilities and security bugs in the embedded Systems and SW.
• Ensure that during development and production, the product is free of known security issues.
• Create and enhance methods and processes in cybersecurity activities (e.g., analysis tools, process documents and templates).
• Assist the project cyber security manager to ensure its compliance and the success of cyber security technical implementation in the SW, and on the system level.
• Collaborate with other development and operation teams and include their respective expertise to fulfil project cyber security requirements.

Kenntnisse

Effective communication

Team collaboration

Cybersecurity knowledge

Product cybersecurity process

ISO 26262 familiarity

ASPICE familiarity

Automotive cybersecurity standards

English proficiency

Ausbildung

Engineering degree in Computer Science / Information Systems / Mechatronics / Embedded Systems

Cybersecurity degree (plus)

Tools

Infineon Aurix HW/SW stack

XCP/UDS/CAN/CAN FD/FlexRay/LIN/A-Ethernet protocols

Cryptographic algorithms & protocols (AES, PKI, CMAC, SHA-256, ECDSA)

Jobbeschreibung

Company Description

AutoSec Innovations is a specialized provider of automotive cybersecurity solutions focused on protecting connected vehicles from evolving cyber threats. The company develops advanced software and architectures that secure automotive systems, data, and passengers in an increasingly digital mobility environment. Its services span automotive cybersecurity (ISO 21434), functional safety (ISO 26262), AUTOSAR architecture and implementation, intrusion detection and monitoring, pentesting for ECUs and vehicles, and targeted trainings. AutoSec Innovations also offers a patented vehicle security and threat analysis product prototype designed to support manufacturers, suppliers, and service providers in meeting strict security and regulatory demands. The team is driven by a mission to make roads safer and vehicles more secure through continuous innovation and industry collaboration.

Role Description: You

will be responsible for the analysis, creation, and delivery of

cybersecurity solutions. In addition, you will be working alongside the cybersecurity manager to

provide full cybersecurity technical support to the project environment.

You will need to have an in-depth understanding of all cybersecurity requirements needed to provide a sound security concept and execute it.

You will be the main cyber security specialist for embedded systems, providing support to all stakeholders to align technical requirements with the customer or the supplier at the project level, and ensure full compliance from early stages of the development to the project end of life. The main goal is to be the main technical cyber security guru of your projects.

Primary duties and responsibilities

• Provide high technical cyber security support for the development teams.
• Lead, create, Review the cyber security technical work products on the project level (e.g TARA, Security Concept).
• Own, manage and review the relevant Cybersecurity requirements for the projects throughout the complete life cycle from concept phase until decommissioning.
• Complete Requirements review, Validation review, and other cyber security work products review.
• Follow up and ensure (with on-hand support) full cybersecurity testing and validation,
• Perform needed analysis to determine potential technical approaches for new and improved state-of-the-art product cybersecurity solutions.
• Execute product security-related risk analysis (development, supply chain, technical and nontechnical) while contributing to general risk management topics.
• Analyze vulnerabilities and security bugs in the embedded Systems and SW.
• Ensure that during development and production, the product is free of known security
• Create and enhance methods and processes in cybersecurity activities (e.g., analysis tools, process documents and templates).
• Assist the project cyber security manager to ensure its compliance and the success of cyber security technical implementation in the SW, and on the system level.
• Collaborate with other development and operation teams and include their respective expertise to fulfil project cyber security requirements.

Education And Qualifications:

• Engineering degree in Computer Science, Information Systems, mechatronics, embedded systems, or the equivalent, with experience, preferably in the automotive industry (cyber security degree is a plus).
• Strong Knowledge of cryptographic algorithms and protocols (AES, PKI, CMAC, SHA-256, ECDSA etc.), and its implementation in an automotive dev environment.
• Strong knowledge of the Infineon Aurix family and its HSM components and their relevant drivers, SW stack, features and basic HW design.
• Some Knowledge in communication stack on different levels such as XCP, UDS, CAN, CAN FD, Flexray, LIN, A-Ethernet, and low level protocols such as SPI, I2C etc…
• Hands on experience in embedded SW development in Automotive, especially in low level SW implementation, CPU configuration, debugging with strong analysis suit.
• Basic Knowledge of the reference (product specific) product standards and customer requirements (e.g., ISO/SAE 21434; ISO 24089; IEC 62443; OWASP; Major OEMs standards for cyber security, AUTOSAR).
• Experience in powertrain development, Hybrid and EVs.
• Excellent English, spoken and written, as this is the main work language.

Skills And Competencies

• Effective communication and social skills.
• Team player you will be the center of a multidisciplinary team and understanding different disciplines is crucial for success.
• Cybersecurity Knowledge as general knowledge in everyday life is plus.
• Product cybersecurity process and related processes (e.g., Concern management; ASPICE; Mass Production)
• Knowledge of some automotive industry standards (ISO 26262, ASPICE,etc…) is a plus.
• Strong interest in knowing the latest technological innovations and state of the art.