Cyber Security Architect

Expleo; Chennai District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Expleo in Chennai seeks an experienced automotive cybersecurity architect to lead security architecture for embedded ECUs, in-vehicle networks, and external connectivity.

You will perform ISO/SAE 21434 based TARA, design secure architectures (Secure Boot, HSM, AUTOSAR SecOC), and support UN Reg. 155/156. Collaborate with V&V teams, Tier-1 and OEM cybersecurity managers to cascade requirements across the lifecycle.

Qualifications

• Extensive experience in automotive cybersecurity architecture.
• Proven ability to lead TARA per ISO/SAE 21434.
• Experience with secure ECU/embedded systems development.
• Knowledge of AUTOSAR SecOC and key management.
• Familiarity with V2X, OTA, CAN/LIN networks, and security testing.
• Ability to respond to RFPs and draft cybersecurity concepts.

Responsibilities

• Lead cybersecurity architecture activities for automotive systems incl ECUs and in-vehicle networks.
• Perform Threat Analysis and Risk Assessment (TARA) per ISO/SAE 21434; define goals and requirements.
• Design and validate secure architectures for embedded/OT: Secure Boot, HSM, SecOC, key mgmt, IDS/firewall.
• Support concepts in line with UN Reg. 155/156 (CSMS/SUMS).
• Collaborate with systems engineers, V&V teams, Tier-1 and OEM cybersecurity managers.
• Respond to RFPs and contribute to cybersecurity proposals (TARA, concepts, test plans).
• Lead PoC/Pilot activities: in-vehicle IDS, OTA security, V2X PKI, HSM cryptography.
• Contribute to internal methodologies and best practices aligned with ISO/SAE 21434 and ASPICE.

Skills

Cybersecurity architecture

ISO/SAE 21434

Threat analysis

AutOSAR SecOC

V2X security

HSM integration

IDS/Firewall

UN Reg 155/156

RFP responses

ASPICE

Tools

CAN/CAN FD networks

Automotive Ethernet

Telematics platforms

Threat modelling tools

Job description

Role & responsibilities

Lead and conduct cybersecurity architecture activities for automotive systems, covering embedded ECUs, E/E architecture, in-vehicle networks (CAN, CAN FD, Automotive Ethernet, LIN) and external connectivity (V2X, OTA, telematics).

Perform Threat Analysis and Risk Assessment (TARA) in accordance with ISO/SAE 21434, and define cybersecurity goals and requirements at vehicle and system level.

Design and validate secure architectures for embedded/OT environments: Secure Boot, HSM integration, AUTOSAR SecOC, key management, IDS/firewall for in-vehicle networks.

Support engineering teams in implementing cybersecurity concepts in compliance with UN Regulation No. 155 (CSMS) and UN Regulation No. 156 (SUMS).

Work closely with systems engineers, software architects, V&V teams, Tier-1 suppliers and OEM cybersecurity managers to ensure that security requirements are correctly cascaded and verified through the development lifecycle.

Respond to RFPs and contribute to business and technical proposals in the automotive cyber domain (TARA reports, cybersecurity concepts, security test plans).

Lead Proof of Concept / Pilot activities on automotive security solutions: in-vehicle IDS, OTA security mechanisms, HSM-based cryptographic protection, V2X PKI.

Contribute to the definition of internal methodologies, work product templates and best practices aligned with ISO/SAE 21434, ASPICE and customer-specific processes.

Stay current with the evolving automotive threat landscape: connected vehicles, software-defined vehicles, autonomous driving stacks, cloud backends, EV charging infrastructure.