Advanced Engineer - Application Security
HARMAN India
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
HARMAN Automotive is seeking a Security Engineer to join our Global KMS team, helping design, deploy, and operate security infrastructure for device provisioning, lifecycle management, and RoT capabilities across our platform landscape.
You will collaborate with product engineering, IT, and manufacturing to embed security throughout the development lifecycle, and you will own day-to-day operation, reliability, and continuous improvement of security services such as KMS, CA, and code-signing.
Qualifications
- 5+ years in a security engineering role.
- Strong Linux experience and command-line proficiency.
- Proficiency in C/C++, Java, and Python.
- Experience with HTTP(S) services, reverse proxies, VPNs, and TLS configurations.
- Foundational experience with HSMs and code-signing services.
- Understanding of secure key delivery and TAEs/TEEs basics.
- Ability to collaborate across engineering, manufacturing, and partners.
Responsibilities
- Design, deploy, and operate security infrastructure services (KMS, CA, provisioning).
- Define APIs and services for secure platform asset management.
- Develop and maintain cryptographic key handling policies and access controls.
- Interface with manufacturing partners to troubleshoot provisioning issues.
- Partner with software teams to enable hosting platforms, tooling, SDKs, and integrations.
- Own day-to-day operation and continuous improvement of security infrastructure.
Skills
Education
Tools
Job description
We’re a global, multi-disciplinary team putting the innovative power of technology to work and transforming tomorrow. At HARMAN Automotive, we give you the keys to fast-track your career.
- Engineer audio systems and integrated technology platforms that augment the driving experience
- Combine ingenuity, in-depth research, and a spirit of collaboration with design and engineering excellence
- Advance in-vehicle infotainment, safety, efficiency, and enjoyment
We are seeking a Security Engineer to join our Global KMS team, contributing to the development and operation of foundational security services across our platform landscape. In this role, you will help design, maintain, and extend security infrastructure and services that underpin secure device provisioning, lifecycle management, and SOC-integrated Root of Trust (RoT) capabilities. Your work will directly support Trusted Execution Environments (TEEs) and other trusted platform components, ensuring robust, scalable, and secure manufacturing and deployment processes. This position requires close collaboration across engineering, manufacturing, and partner ecosystems, combining strong technical expertise with a structured and operational mindset.
- Collaborate closely with product engineering, IT, and manufacturing teams to ensure security is embedded proactively throughout the product development lifecycle.
- Design, develop, deploy, and operate security infrastructure services, including:
- Key Management Systems (KMS)
- Manufacturing provisioning services
- Certificate Authorities (CA)
- Code-signing infrastructure
- Define and implement APIs, protocols, and services for the secure enumeration, configuration, and management of platform assets.
- Develop and maintain policies, procedures, and controls for cryptographic key generation, handling, lifecycle management, and access governance.
- Interface with manufacturing partners to support, troubleshoot, and resolve security provisioning issues.
- Partner with software development teams to enable hosting platforms, tooling, SDKs, and integration components for internal and external consumers.
- Own the day-to-day operation, reliability, and continuous improvement of security infrastructure services.
- 5+ years of industry experience in a security engineering role.
- Strong working knowledge of Linux environments, including command-line tools.
- Proficiency in C/C++, Java, and Python.
- Practical experience with HTTP(S) services, including reverse proxies (Apache or Nginx), VPNs, and SSL/TLS configuration.
- Foundational experience with Hardware Security Modules (HSMs), including:
- PKCS#11 (Cryptoki) interface usage
- Code-signing services
- Secure payload decryption, certificate signing, and device identity generation
- Ability to understand complex systems, particularly within vehicle architectures and manufacturing workflows.
- Strong understanding of security concepts, including:
- Secure key generation and delivery
- Access control mechanisms and token-based authorization
- Multi-party authorization (e.g., n-of-m approval schemes)
- Cryptographic primitives and secure communication protocols
- Bachelor's or Master's degree in Computer Science, Engineering, Mathematics, or a related field.
- Excellent verbal and written communication skills in English.
- Strong collaboration skills, openness in communication, resilience, and a high sense of ownership.
- Automotive cybersecurity experience, ideally within a Tier-1 supplier or OEM environment.
- Hands-on experience with:
- HSM deployment, maintenance, backup, and recovery
- Code-signing infrastructure and access control systems
- Web services deployment and CI/CD pipelines
- Experience with containerized and cloud-native technologies such as Docker, Kubernetes, and Amazon ECS.
- Familiarity with CloudHSM technologies.
- Experience with Utimaco HSMs, including firmware configuration and management.
- Experience with logging, monitoring, and observability tools such as rsyslog, Logstash, and the ELK Stack.
- Knowledge of Linux system hardening and access control technologies, including SELinux, AppArmor, SMACK, PAM, SSH, and FIDO/U2F.
- Key provisioning experience for Trusted Execution Environments (TEEs), such as Trustonic/Kinibi.
- Practical experience with:
- Microsoft SignTool
- AUTOSAR (SHE)
- Android APK/APEX signing processes
- Willing to travel up to 5%, both domestically and internationally.
- Willing to work in an office- hybrid setup in Pune, India.
- A hybrid work environment that balances flexibility with in-person collaboration, with most office-based roles onsite three days a week.
- Access to employee discounts on HARMAN and Samsung products (including JBL, Harman / Kardon, AKG, and others)
- Learning and development opportunities through our award-winning HARMAN University programs
- Wellness benefits designed to support your overall well-being
- Tuition reimbursement support
- Access to the HARMAN campus fitness center and cafeteria, where available
- An inclusive and diverse work environment that supports both your professional and personal development
HARMAN is committed to making every employee feel welcomed, valued, and empowered. No matter what role you play, we encourage you to share your ideas, voice your distinct perspective, and bring your whole self with you – all within a support-minded culture that celebrates what makes each of us unique. We also recognize that learning is a lifelong pursuit and want you to flourish. We proudly offer added opportunities for training, development, and continuing education, further empowering you to live the career you want.
Ever since the 1920s, we’ve been amplifying the sense of sound. Today, that legacy endures, with integrated technology platforms that make the world smarter, safer, and more connected.
Across automotive, lifestyle, and digital transformation solutions, we create innovative technologies that turn ordinary moments into extraordinary experiences. Our renowned automotive and lifestyle solutions can be found everywhere, from the music we play in our cars and homes to venues that feature today’s most sought-after performers, while our digital transformation solutions serve humanity by addressing the world’s ever-evolving needs and demands. Marketing our award‑winning portfolio under 16 iconic brands, such as JBL, Mark Levinson, and Revel, we set ourselves apart by exceeding the highest engineering and design standards for our customers, our partners and each other.
Please be aware that HARMAN recruiters will always communicate with you from an '@harman.com', ‘@careers.harman.com’ or ‘harmanglobal.avature.net’ email address. We will never ask for payments, banking, credit card, personal financial information or access to your LinkedIn/email account during the screening, interview, or recruitment process. If you are asked for such information or receive communication from an email address not ending in one of the above email domains about a job with HARMAN, please cease communication immediately and report the incident to us through: harmancareers@harman.com.
HARMAN is proud to be an Equal Opportunity employer.
HARMAN strives to hire the best qualified candidates and is committed to building a workforce representative of the diverse marketplaces and communities of our global colleagues and customers.
All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
HARMAN attracts, hires, and develops employees based on merit, qualifications and job-related performance. (www.harman.com)
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
