Lead Engineer - Automotive Cybersecurity for Powertrain Systems

Mahindra And Mahindra Limited; Bengaluru; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

Mahindra and Mahindra Limited is seeking an Automotive Cyber Security Testing Lead Engineer – Powertrain ECUs to lead cybersecurity activities for safety-critical powertrain control systems, including ICE, Hybrid and Electric powertrains.

You will define and verify security requirements, drive threat modelling per ISO/SAE 21434, coordinate across systems, software, hardware and validation teams, and mentor engineers while ensuring secure updates, secure communication and robust incident response

Qualifications

• 10–12+ years in automotive embedded or powertrain systems.
• 3–6+ years hands-on automotive cybersecurity.
• 2–3+ years scripting and automation.
• Strong understanding of powertrain ECU development lifecycle.

Responsibilities

• Lead cybersecurity engineering activities for powertrain ECUs.
• Define and review test requirements to verify security controls (FUZZ and PEN tests).
• Define secure architecture including secure boot, secure communication, OTA security, and key management.
• Perform and lead Threat Analysis and Risk Assessment (TARA) per ISO/SAE 21434.
• Define cybersecurity goals, requirements, and mitigations for powertrain systems.
• Coordinate cybersecurity activities with system, software, hardware, and validation teams.
• Lead cybersecurity reviews with Vehicle teams, suppliers, and internal stakeholders.
• Mentor cybersecurity engineers and review technical deliverables.
• Support vulnerability management, incident response, and post‑SOP cybersecurity activities.

Skills

Cybersecurity leadership

Cybersecurity testing

Threat modelling

Embedded systems

Powertrain knowledge

Scripting & automation

Tools

CAN/CAN-FD

UDS protocol

Automotive Ethernet

Secure boot

HSM

Job description

Position Overview We are looking for an Automotive Cyber Security Testing Lead Engineer – Powertrain ECUs to lead cybersecurity engineering activities for safety‑critical powertrain control systems, including ICE, Hybrid, and Electric powertrain ECUs. This role is responsible for ensuring that powertrain functions are verified and validated to protect against cyber threats while complying with global automotive cybersecurity regulations throughout the product lifecycle.

Key Responsibilities

• Lead cybersecurity engineering activities for powertrain ECUs (Engine ECU, VCU, MCU, BMS, HCU, OCDC etc.)
• Act as cybersecurity technical owner for assigned powertrain programs
• Define and review test requirements to verify Cyber security controls (FUZZ and PEN tests)
• Define and review secure architecture including secure boot, secure communication, OTA security, and key management
• Perform and lead Threat Analysis and Risk Assessment (TARA) as per ISO/SAE 21434
• Define cybersecurity goals, requirements, and mitigations for powertrain systems
• Guide secure architecture implementation for all Cyber Security controls like secure boot, secure flashing, secure communication etc.
• Ensure cybersecurity alignment with functional safety (ISO 26262) requirements
• Support cybersecurity compliance activities for UNECE R155, AIS 189 and R156, AIS 190.
• Coordinate cybersecurity activities with system, software, hardware, and validation teams
• Lead cybersecurity reviews with Vehicle teams, suppliers, and internal stakeholders
• Guide and mentor cybersecurity engineers and review technical deliverables
• Support vulnerability management, incident response, and post‑SOP cybersecurity activities

Powertrain‑Specific Cybersecurity Scope

• Protection of torque, speed, propulsion, charging and energy management functions
• Secure diagnostics and calibration access (UDS)
• Secure production and service software updates
• Protection against unauthorized software or calibration manipulation

Standards & Compliance

• ISO/SAE 21434 – Road Vehicles Cybersecurity Engineering
• UNECE R155, AIS 189 – Cybersecurity Management System
• UNECE R156, AIS 190 – Software Update Management System
• ISO 26262 – Functional Safety (coordination and alignment)

Experience

• 10–12+ years of experience in automotive embedded or powertrain systems
• 3–6+ years of hands‑on automotive cybersecurity experience
• 2–3+ years of hands‑on scripting and automation using languages
• Strong understanding of powertrain ECU development lifecycle

Technical Skills

• Powertrain control systems and real‑time embedded software
• CAN, CAN‑FD, Automotive Ethernet, UDS, and various ECU level interfaces
• Cryptography fundamentals, PKI, key management
• Secure boot, HSM, secure diagnostics and other Cyber Security Controls
• Cybersecurity vulnerability and incident management
• OTA/FOTA update security and backend interaction
• Threat modelling and vulnerability analysis

Soft Skills & Leadership

• Strong technical leadership and ownership mindset
• Effective communication with cross‑functional teams
• Risk‑based decision making in safety‑critical systems
• Mentoring and guiding engineers

Industry Preferred Qualifications & General Requirements

Our commitment to Diversity, Equity, and Inclusion At Mahindra and Mahindra Limited, we believe that diversity drives innovation, and inclusion is at the heart of everything we do. We are committed to cultivating a workplace where every individual feels valued, respected, and empowered to thrive. We are proud to be an Equal Opportunity Employer. All qualified applicants will be considered for employment without regard to age, caste, race, religion, color, ethnic origin, gender identity, nationality, physical or mental disability, medical condition, sexual orientation, educational background, marital or domestic partnership status, pregnancy or childbirth, veteran status, citizenship status, ancestry, financial status, or any other personal characteristic protected by applicable law. We actively encourage candidates from all backgrounds to apply and bring their unique perspectives to our teams. We are committed to ensuring an accessible and inclusive experience for all applicants. Together, we rise by embracing differences and building a future that reflects the communities we serve. Experience Level Senior Level