Automotive Cybersecurity Expert

Ampira Energy Limited; United Kingdom; Remote; GBP 70,000 - 110,000; Full time

Job summary

Ampira Energy Limited is seeking an Automotive Cybersecurity Expert to guide secure vehicle systems, embedded products and connected automotive technologies. You will act as a key cybersecurity interface across engineering domains, defining risks and ensuring evidence-driven compliance with ISO/SAE 21434.

You will lead threat analyses, develop security requirements, advise on secure architectures, and support vulnerability management throughout the lifecycle, including post-development

Qualifications

• Degree in Cybersecurity or related discipline.
• Proven experience applying ISO/SAE 21434 in automotive development.
• Experience delivering cybersecurity across the product lifecycle.

Responsibilities

• Act as subject-matter expert for automotive product cybersecurity across engineering programmes.
• Plan and coordinate cybersecurity activities per ISO/SAE 21434.
• Define cybersecurity goals, claims, requirements and risk-treatment measures.
• Support development of secure vehicle, system, software and hardware architectures.
• Translate cybersecurity risks into testable engineering requirements.
• Advise teams on controls including secure boot, encryption, and key management.
• Support vulnerability analysis, penetration testing and testing.
• Evaluate vulnerabilities and assist with incident response and remediation.
• Produce and maintain cybersecurity work products and evidence.
• Contribute to supplier and regulatory discussions on product cybersecurity.

Skills

ISO/SAE 21434

Threat Analysis

Risk Assessments

Security Architecture

Embedded Systems

CAN/CAN FD

Automotive Ethernet

Hardware Security Modules

Vulnerability Management

Incident Response

Documentation & Audits

Education

Degree in Cybersecurity

Job description

We are seeking an Automotive Cybersecurity Expert to support the development of secure vehicle systems, embedded products and connected automotive technologies. You will act as a key cybersecurity interface between systems, software, hardware, validation, functional safety, quality, customers and suppliers. Your role will be to define and address product cybersecurity risks throughout the automotive development lifecycle, ensuring alignment with ISO/SAE 21434 and applicable regulatory requirements. You will provide specialist guidance during the concept, architecture, design, implementation, verification and post-development phases, ensuring that cybersecurity risks are identified, appropriately treated and supported by clear, auditable engineering evidence.

Key Responsibilities

• Act as a subject-matter expert for automotive product cybersecurity across engineering programmes.
• Plan and coordinate cybersecurity activities in accordance with ISO/SAE 21434.
• Support item definition, cybersecurity planning, tailoring and interface-agreement activities.
• Conduct and review Threat Analysis and Risk Assessments, including asset identification, attack-path analysis, impact assessment and risk determination.
• Define cybersecurity goals, claims, concepts, requirements and risk-treatment measures.
• Support the development and review of secure vehicle, system, software and hardware architectures.
• Translate identified cybersecurity risks into clear and testable engineering requirements.
• Advise engineering teams on appropriate cybersecurity controls, including secure boot, authentication, encryption, key management, access control, secure diagnostics and secure communications.
• Support cybersecurity verification and validation, including vulnerability analysis, penetration testing, fuzz testing and requirements-based testing.
• Evaluate cybersecurity vulnerabilities and support incident response, remediation and coordinated vulnerability management activities.
• Produce and maintain cybersecurity work products, traceability records and evidence supporting the cybersecurity case.
• Perform cybersecurity reviews and assessments to confirm compliance with project plans, organisational processes and ISO/SAE 21434.
• Support the integration of cybersecurity with systems engineering, functional safety, software, hardware and validation processes.
• Define, communicate and manage cybersecurity requirements for suppliers and third-party components.
• Assess supplier cybersecurity capabilities, development plans, technical solutions and compliance evidence.
• Support customer, supplier, assessor and regulatory discussions relating to product cybersecurity.
• Contribute to post-development activities, including vulnerability monitoring, cybersecurity event analysis and incident response.
• Help develop and improve organisational cybersecurity processes, templates, methods and guidance.
• Promote cybersecurity awareness and provide technical coaching to engineering and programme teams.

Requirements

• Degree in Cybersecurity, Software Engineering, Electronic Engineering, Systems Engineering, Computer Science or a related discipline.
• Strong practical knowledge of ISO/SAE 21434 and its application within automotive product development.
• Proven experience delivering cybersecurity engineering activities across the automotive product lifecycle.
• Strong experience conducting and reviewing Threat Analysis and Risk Assessments.
• Experience defining cybersecurity concepts, goals, claims, requirements and controls.
• Good understanding of automotive electrical and electronic architectures, embedded systems and electronic control units.
• Knowledge of automotive communication technologies and protocols, such as CAN, CAN FD, LIN, Automotive Ethernet, UDS and DoIP.
• Understanding of common automotive attack vectors and appropriate technical countermeasures.
• Experience with cybersecurity technologies such as hardware security modules, secure boot, secure flashing, cryptography, authentication, intrusion detection and key management.
• Knowledge of vulnerability management, incident handling, system hardening and secure development principles.
• Experience producing clear, traceable and audit-ready cybersecurity documentation.
• Familiarity with UNECE R155 and automotive Cybersecurity Management Systems.
• Awareness of UNECE R156, software-update management and secure over-the-air update processes.