Automotive Cybersecurity Developer

ACL Digital; Pune District; On-site; INR 1,500,000 - 2,800,000; Full time

Job summary

ACL Digital seeks a Hands-On Automotive Cybersecurity Engineer to drive low-level security implementations on automotive ECUs using Embedded C/C++ on real hardware benches. You will integrate HSMs, implement Root of Trust and Secure Boot, work with AUTOSAR and non-AUTOSAR stacks, and perform fuzzing and vulnerability testing on ECU targets with Vector and Lauterbach tooling.

Strong C/C++ coding, secure boot, OTA/FOTA pipelines, cryptographic primitives (AES, RSA, ECC), and secure key management

Qualifications

• Advanced Embedded C/C++ programming for automotive ECUs.
• Hands-on experience with 32-bit automotive MCUs (AURIX, S32, RH850, STM32, TI AM26x).
• Knowledge of UDS Security Access, CAN/CAN-FD, and cryptographic primitives.

Responsibilities

• Write, maintain, and optimize production-grade Embedded C/C++ code for automotive ECUs running bare-metal or RTOS environments.
• Integrate and configure Hardware Security Module (HSM) firmware stacks and configure underlying security hardware.
• Implement Root of Trust, Secure Boot mechanisms, and Secure Firmware Update (OTA/FOTA) pipelines.
• Code UDS Security Access routines (Services $27 / $29) and implement cryptographic primitives (AES, RSA, ECC, PKI) and key storage management.
• Perform active security testing, interface fuzzing, penetration testing, and vulnerability assessments on real ECU targets.

Skills

Embedded C

Embedded C++

AURIX MCUs

Security stacks

UDS Security

Cryptography

CAN/CAN-FD

Vector tools

Fuzzing

Tools

Vector CANoe

Lauterbach TRACE32

CANalyzer

JTAG

Job description

We are seeking a Hands-On Automotive Cybersecurity Engineer to drive low-level security implementation and testing on physical Electronic Control Units (ECUs). This is an active execution role—not a process, governance, or compliance management position. You will write robust Embedded C/C++ code, configure microcontroller security peripherals, integrate Hardware Security Modules (HSM), and validate firmware security directly on hardware target benches.

Core Responsibilities

• Embedded Development: Write, maintain, and optimize production-grade Embedded C/C++ code for automotive ECUs running bare-metal or RTOS environments.
• HSM & Hardware Security: Integrate and configure Hardware Security Module (HSM) firmware stacks (e.g., Vector vHSM, ESCRYPT CycurHSM) and configure underlying silicon security hardware (SHE, HSM cores).
• Secure Boot & Firmware: Implement Root of Trust, Secure Boot mechanisms, and Secure Firmware Update (OTA/FOTA) pipelines.
• Diagnostics & Cryptography: Code UDS Security Access routines (Services $27 / $29) and implement cryptographic primitives (AES, RSA, ECC, CMAC) and key storage management.
• Bench Validation & Fuzzing: Perform active security testing, interface fuzzing, penetration testing, and vulnerability assessments using hardware trace tools and bus analyzers on real ECU targets.

Required Qualifications & Technical Skills

• Programming Languages: Advanced proficiency in Embedded C and Embedded C++.
• Microcontrollers: Hands-on development experience with 32-bit automotive microcontrollers such as Infineon AURIX (TC2x/TC3x/TC4x), NXP S32, Renesas RH850, STMicroelectronics (STM32), or TI AM26x.
• Security Stacks: Proven experience in one of the following domains:
• AUTOSAR Ecosystem: AUTOSAR Crypto Stack (vCSM, vCRY, vHSM, Vector Security Stacks).
• Non-AUTOSAR / Bare-Metal: Custom security implementations on RTOS/Bare-Metal architectures.
• Protocols & Diagnostics: Deep knowledge of UDS (ISO 14229) Security Access, CAN/CAN-FD, and cryptographic algorithms (AES-128/256, RSA, ECC, PKI).
• Validation & Debugging: Proficiency with Vector tools (CANoe, CANalyzer, vFlash), hardware debuggers (Lauterbach Trace32, JTAG), and fuzzing/vulnerability testing tools.