Lead Engineer - Automotive Cybersecurity for Powertrain ECUs

Mahindra And Mahindra Limited; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Mahindra And Mahindra Limited seeks an experienced Lead Engineer - Software and Cyber Security for Powertrain ECUs. You will drive cybersecurity engineering activities across Engine ECU, VCU, MCU, BMS, and other powertrain controls to protect critical functions and ensure regulatory compliance throughout the lifecycle.

You will define test requirements, oversee secure architectures, perform TARA, and ensure alignment with ISO 26262 and UNECE AIS standards.

Qualifications

• Bachelor's or Master's degree in a relevant engineering or Cyber Security field.
• Experience in automotive embedded or powertrain systems.
• Strong knowledge of automotive cybersecurity standards and practices.

Responsibilities

• Lead cybersecurity engineering activities for Powertrain ECUs (Engine ECU, VCU, MCU, BMS, HCU, OCDC).
• Serve as cybersecurity technical owner for assigned powertrain programs.
• Define and review test requirements for cybersecurity controls (fuzz testing, penetration testing).
• Define and review secure architectures (secure boot, secure communication, OTA security, key management).
• Perform Threat Analysis and Risk Assessment (TARA) per ISO/SAE 21434.
• Align cybersecurity goals with Functional Safety (ISO 26262) requirements.
• Coordinate with system, software, hardware, and validation teams; lead cybersecurity reviews.
• Mentor cybersecurity engineers and support vulnerability management and post-SOP activities.

Skills

Powertrain embedded software

CAN/CAN-FD, Automotive Ethernet

UDS and ECU communication

Cryptography PKI and key management

Secure boot and secure diagnostics

Vulnerability and incident management

OTA/FOTA security

Threat modelling

Education

Bachelor's or Master's in Electronics/Embedded Systems/Automotive Engineering/Computer Science/Cyber Security

Job description

Lead Engineer - Software and Cyber Security Responsibilities & Key Deliverables

Position Overview

We are looking for an Automotive Cyber Security Testing Lead Engineer for Powertrain ECUs to lead cybersecurity engineering activities for safety-critical powertrain control systems, including ICE, Hybrid, and Electric Powertrain ECUs. The role is responsible for ensuring that powertrain functions are protected against cyber threats and comply with global automotive cybersecurity regulations throughout the product lifecycle.

Key Responsibilities

• Lead cybersecurity engineering activities for Powertrain ECUs such as Engine ECU, VCU, MCU, BMS, HCU, OCDC, etc.
• Serve as the cybersecurity technical owner for assigned powertrain programs.
• Define and review test requirements for cybersecurity controls, including fuzz testing and penetration testing.
• Define and review secure architectures covering secure boot, secure communication, OTA security, and key management.
• Perform and lead Threat Analysis and Risk Assessment (TARA) as per ISO/SAE 21434.
• Define cybersecurity goals, requirements, and mitigation strategies for powertrain systems.
• Guide implementation of cybersecurity controls such as secure boot, secure flashing, and secure communication.
• Ensure alignment between cybersecurity and Functional Safety (ISO 26262) requirements.
• Support compliance activities related to UNECE R155/R156 and AIS 189/190.
• Coordinate cybersecurity activities with system, software, hardware, and validation teams.
• Lead cybersecurity reviews with vehicle teams, suppliers, and internal stakeholders.
• Mentor cybersecurity engineers and review technical deliverables.
• Support vulnerability management, incident response, and post-SOP cybersecurity activities.

Powertrain-Specific Cybersecurity Scope

• Protection of torque, speed, propulsion, charging, and energy management functions.
• Secure diagnostics and calibration access (UDS).
• Secure production and service software updates.
• Protection against unauthorized software or calibration modifications.

Standards & Compliance

• ISO/SAE 21434 – Road Vehicles Cybersecurity Engineering
• UNECE R155 / AIS 189 – Cybersecurity Management System
• UNECE R156 / AIS 190 – Software Update Management System
• ISO 26262 – Functional Safety

Industry Preferred

• Industry Preferred Automotive Qualifications Bachelor's or Master's degree in Electronics, Embedded Systems, Automotive Engineering, Computer Science, or Cyber Security

General Requirements

• Experience 7-9 years of experience in automotive embedded or powertrain systems.
• Strong understanding of the powertrain ECU development lifecycle.

Technical Skills

• Powertrain control systems and real-time embedded software.
• CAN, CAN-FD, Automotive Ethernet, UDS, and ECU communication interfaces.
• Cryptography fundamentals, PKI, and key management.
• Secure boot, HSM, secure diagnostics, and other cybersecurity controls.
• Vulnerability and incident management.
• OTA/FOTA security and backend integration.
• Threat modelling and vulnerability analysis.

Soft Skills & Leadership

• Strong technical leadership and ownership mindset.
• Effective communication with cross-functional teams.
• Risk-based decision-making in safety-critical environments.
• Mentoring and coaching engineers.

Our commitment to Diversity, Equity, and Inclusion

Experience Level Senior Level