Automotive Cybersecurity Architecture & Trust Lead

Rely; France; À distance; EUR 90 000 - 150 000; Plein temps

Résumé du poste

Rely is seeking a Cybersecurity Architecture & Trust Lead to own the cross-stack security architecture for automotive systems. You will define and maintain T1/T2/T3 security models, drive ISO/SAE 21434 compliance, and lead risk analysis and secure software delivery.

You will coordinate with safety, DevSecOps, and V&V teams, establish secure boot, signing, PKI, SBOM, and vulnerability management, and challenge interfaces across vehicle, cloud, and external software components.

Qualifications

• 8 to 12+ years in embedded, automotive, defence, aerospace or critical-systems cybersecurity.
• Experience in connected products and secure software delivery.
• Proven ability to define and enforce trust frameworks across complex stacks.

Responsabilités

• Define and maintain the T1/T2/T3 cybersecurity architecture and trust model.
• Lead TARA, CSMS, cybersecurity requirements and risk traceability.
• Define secure boot, software signing, attestation, PKI and certificate lifecycle.
• Set SBOM, vulnerability-management and supplier-cyber evidence expectations.
• Challenge interfaces between vehicle, operator station, C2, cloud and external components.
• Align cyber evidence with safety, DevSecOps and V&V.

Connaissances

ISO/SAE 21434

TARA

CSMS

secure boot

chain of trust

PKI

HSM

secure OTA

SBOM

vulnerability management

cryptography

secure communications

Linux/embedded hardening

Adversarial thinking

technical authority

persistence

pragmatic decision-making

Formation

8-12+ years cybersecurity in embedded/auto/defense/critical-systems

Description du poste

Rely is seeking a Cybersecurity Architecture & Trust Lead to own the cross-stack security architecture for automotive systems. You will define and maintain T1/T2/T3 security models, drive ISO/SAE 21434 compliance, and lead risk analysis and secure software delivery.

You will coordinate with safety, DevSecOps, and V&V teams, establish secure boot, signing, PKI, SBOM, and vulnerability management, and challenge interfaces across vehicle, cloud, and external software components.