Automotive Cybersecurity Architect

NXP Semiconductors; Barcelona; Presencial; EUR 90.000 - 135.000; Jornada completa

Descripción de la vacante

TrustMotion, part of NXP, focuses on software-defined vehicle security and is seeking an experienced Security Architect Expert. You will analyze system threats, define mitigation strategies, and drive architectural decisions with SW Architects, Developers and cybersecurity specialists to ensure formal compliance with automotive cybersecurity standards.

You will produce required evidence and KPIs, support security management activities, and help shape cybersecurity processes across development

Formación

• University degree in Engineering; 10–15 years SW Architecture experience.
• 5 years experience in Automotive Cybersecurity Standards (ISO21434, ASPICE for Cybersecurity, UNECE WP.29)
• 5 years experience System Security
• Cybersecurity Standards Automotive Industry Standards
• Analytical Thinking Results and Solution Orientation

Responsabilidades

• Conduct threat analysis and risk assessments to identify potential cybersecurity threats, derive cybersecurity requirements and design solutions to mitigate risks.
• Define cybersecurity specification and technical requirements for product development and testing.
• Define cybersecurity events, identify item weaknesses and perform vulnerability analysis.
• Produce ISO21434 related work products and evidence.
• Support customer interface activities by providing technical expertise to discussions.
• Guide and mentor development teams in Cybersecurity.
• Oversee correctness of software implementation and verification.
• Monitor cybersecurity information and manage vulnerabilities.

Conocimientos

Threat Modeling

Risk Management

Security Controls

Cryptography

Analytical Thinking

Educación

Engineering degree

ISO21434 / ASPICE for Cybersecurity

Embedded Security

UML Modeling / AUTOSAR / QNX

Herramientas

UML Model Development

AUTOSAR

QNX

Descripción del empleo

Ready to join the future of innovation at TrustMotion? TrustMotion (former TTTech Auto), part of NXP, is a leading software platform product and service provider with a focus on System, Safety, and Security for the Software-Defined Vehicle (4SDV). Level G4 As Cybersecurity Architect Expert you will be part of the Security Engineering team. We are a multidisciplinary team composed of Cybersecurity Architects and Cybersecurity Managers from different industries (automotive, smartcards, embedded, IoT, railway...). We develop Out of Context and In Context middleware products for the automotive industry, focusing specifically on ADAS and in the next generation of Communication paradigms of SDV. Our mission is to ensure that our products are secure by implementing the right technologies and features, and ensuring the security maturity matches the expectations of our customers and addressing compliance with Standards and Regulations. As Security Architect, you will analyze system threats and risks and will define mitigation strategies that will be translated into architectural decisions, together with an experienced team of SW Architects, Developers and other security specialists.

Product of the Position Analyze system threats and risks to define cybersecurity measures that drive architectural decisions for products and projects, ensuring cybersecurity risks remain under control.

Support security management activities by producing the required evidence, KPIs, and work products while ensuring compliance with automotive cybersecurity industry standards.

Your Responsibilities:

• Conduct threat analysis and risk assessments to identify potential cybersecurity threats, derive cybersecurity requirements and design solutions to mitigate risks.
• Define cybersecurity specification and technical requirements for product development and testing.
• Define cybersecurity events, identify item weaknesses and make vulnerability analysis on the item.
• Define Cybersecurity goals and Cybersecurity claims.
• Define Cybersecurity specifications, control and requirements.
• Produce ISO21434 related work products and evidence.
• Sometimes, act as a security assessor or auditor for projects developed by other team colleagues.
• Act as deputy of the Security Manager of the project.
• Support customer interface activities by providing technical expertise to the discussion.
• Support the project and product in all the development phases, including requirements creation, design and testing, ensuring the correctness and collecting evidence of cybersecurity being implemented according to the cybersecurity processes and industry standards.
• Guide and assist the development teams and stakeholders by coaching and mentoring in Cybersecurity.
• Facilitate the estimation process for new projects and cybersecurity features.
• Analyze system and software architecture for automotive projects and lead the design of the Cybersecurity related features aligned with business goals and industry best practices.
• Oversee correctness of software implementation and verification.
• Monitor cybersecurity information and manage vulnerabilities.
• Be and act as an assessor and ambassador of cybersecurity practices in the Business Unit.
• Explore emerging new technologies and industry best practices.
• Prepare training programs for development teams.
• Support the Cybersecurity Managers in creating, adapting, and improving cybersecurity processes for Software Development in critical environments.

Education

• University’s Degree in Engineering Must Have 10-15 years experience in SW Architecture
• 5 years experience in Automotive Cybersecurity Standards (ISO21434, ASPICE for Cybersecurity, UNECE WP.29)
• 5 years experience System Security experience
• Cybersecurity Standards Automotive Industry Standards
• Analytical Thinking Results and Solution Orientation
• Threat Modeling, Risk Management, Security Controls Cryptography
• Nice to have CISM, CISSP, or similar certifications
• Embedded Security experience
• Functional Safety Knowledge SW Modeling including UML Model Development AUTOSAR, QNX
• Understanding the dichotomy of Problem Space and Solution Space

We have programs in place focused on diversity, inclusion and equality.