Cyber Security Penetration Test Engineer

Tata Technologies Limited; Lighthorne; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Pension match 5%

25 days holiday

Private health care

JLR privilege scheme

Group income protection

EAP program

Group life assurance

Private health cash plan

Job summary

Tata Technologies Limited, based at a customer site in Gaydon, is seeking a Cyber Security Penetration Test Engineer. You will build, run and oversee pen tests across ECUs, systems and vehicles to ensure secure product development for automotive projects.

You will define scopes and plans, review reports, and manage external suppliers while applying scripting skills to automate tests and strengthen security posture.

Qualifications

• Knowledge of scripting languages (Python, CAPL) and cyber security artefacts in ISO 21434.
• Experience with pen testing on automotive ECUs, systems and vehicles.
• Ability to work in cross-functional teams and deliver compliant security artefacts.

Responsibilities

• Manage delivery of penetration test activities per CSMS (ISO 21434).
• Create scopes and plans for ECUs, systems and vehicles and review pen test reports.
• Lead external pen test suppliers and develop pen test scripts and tools.

Skills

Python

CAPL

Penetration testing

Cyber security concepts

Collaborative skills

Tools

Pen test scripts

Job description

At Tata Technologies we make product development dreams a reality by designing, engineering and validating the products of tomorrow for the worlds leading manufacturers. Due to our continued growth we are now recruiting for Cyber Security Penetration Test Engineer to be based at our customer's office in Gaydon. Our Engineering Research and Development department (ER&D) is a fast growing function within Tata Technologies Limited that is assembled to work on exciting projects globally for multiple customers. It comprises highly specialized engineers across Automotive, Aerospace and Industrial Heavy Machinery.

Scope of Role

Cyber Security is a fast paced and dynamic area within the Automotive Industry. You will be an elemental part of the Product Engineering teams delivering customer products in a secure way always looking at improving the Cyber Security posture and responding to emergent threats. As a Cyber Security Penetration Test Engineer, you will be responsible for developing the Cyber Security Penetration test lab, creating and reviewing penetration test scopes, penetration test plans and penetration test report, execute penetration test and support the creation of vulnerabilities and the related CSMS artefacts. You will support the Product Engineering teams to understand and support you to deliver the penetration test related activities.

Area of Responsibility

Manage the delivery of penetration test activities as per CSMS (ISO 21434) according to scope, time, budget and quality and build/ review Vulnerability reports. Create penetration test scopes and plans for ECUs, systems and vehicles and review pen test reports for ECUs, systems and vehicles. Assess Cyber Security Penetration test scopes and plans for customer products and run penetration test as per penetration test scope for ECUs, systems and vehicles. Manage and lead external penetration test suppliers and their activities and maintain and develop pen test scripts and tools for pen test and fuzz test. Support external penetration test activities for ECUs, systems and vehicles, support Vulnerabilities resolution and VSOC by demonstrating vulnerabilities, attacks, PoCs and support the sign off of the Pen test relevant artefact and type approval activities.

Knowledge / Experience

You will have knowledge of any scripting language, including Python, CAPL and others; knowledge of TARA, security concepts and other Cyber security artefacts mentioned in ISO 21434 and of Cyber Security technologies used to protect embedded systems. Knowledge of, at least two or more of the automotive technologies: in-vehicle networks, safety critical embedded software and hardware, low-level debug interfaces for embedded hardware, complex onboard computers, vehicle connectivity, etc. Understanding of high integrity systems, and secure software and / or hardware design principles, in an embedded environment. Ability to engineer in a way that is demonstrably compliant with standards and technical specifications. Excellent collaborative skills.

Benefits

• Competitive salary along with excellent benefits
• Pension Scheme: We match employee contribution up to 5% of salary
• 25 Days Holiday
• Private Health Care
• Tata Jaguar Land Rover Privilege Scheme - up to 20% off new JLR vehicles
• Group Income Protection
• Health Assured Employee Assistance Program
• Group Life Assurance
• Health Shield Private Health Cash Plan

If you are passionate about bringing innovation to the projects you work on and want to join a global company, then this is the place for you. Tata Technologies: Engineering a better world.

Tata Technologies would like to thank all applicants for their interest, each application will be reviewed against the set criteria for the role. We would like to advise that only candidates under consideration will be contacted. If you do not hear from us within 10 working days following the closing date it will mean that unfortunately your application has not been successful. We will however retain your details for any suitable future opportunities.