Product Cyber Security Engineer

Sigma Embedded Engineering; Kraków; Hybrid; PLN 110,000 - 170,000; Full time

Benefits offered by this job

Flexible remote/hybrid options

International projects

Job summary

Sigma Embedded Engineering in Kraków is seeking a Product Cyber Security Engineer to define and implement cybersecurity for embedded and vehicle systems across the product lifecycle.

You will collaborate with system architects, software teams, and product groups to ensure ISO/SAE 21434 compliance, perform TARA, and drive secure software and OTA updates in an international, cross-functional environment.

Flexible remote or hybrid working model is offered depending on the project.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cyber Security, Electrical Engineering, or related field.
• Experience with product cybersecurity in embedded or automotive environments.
• Knowledge of ISO/SAE 21434, UN R155 / UN R156, and TARA methodologies.
• Experience in security requirements engineering and security concept development.
• Understanding of secure communication protocols, Secure Boot, cryptographic key management, and OTA security.
• Ability to work independently and in international, cross-functional teams.

Responsibilities

• Perform cybersecurity engineering activities according to ISO/SAE 21434.
• Conduct Threat Analysis and Risk Assessments (TARA).
• Define and manage cybersecurity requirements.
• Develop and maintain cybersecurity concepts for embedded and vehicle systems.
• Support compliance with UN R155 and UN R156 regulations.
• Analyze system architectures and identify cybersecurity risks and mitigation strategies.
• Collaborate with cross-functional engineering teams to implement cybersecurity controls.
• Support security reviews, verification, and validation activities.
• Contribute to secure product development processes and best practices.

Skills

ISO/SAE 21434

UN R155/UN R156

TARA methodologies

Security requirements engineering

Security concept development

Secure communication protocols

Secure Boot

Cryptographic key management

OTA security

Education

Bachelor's or Master's in CS/Cyber Security/EE

Job description

We are looking for a Product Cyber Security Engineer to support the development of next-generation connected products for a leading global manufacturer of power and propulsion solutions.

The role focuses on defining and implementing cybersecurity measures for embedded and vehicle-like systems, ensuring compliance with industry standards and regulatory requirements. You will work closely with system architects, software developers, and product teams throughout the entire product lifecycle.

Key Responsibilities

• Perform cybersecurity engineering activities according to ISO/SAE 21434.
• Conduct Threat Analysis and Risk Assessments (TARA).
• Define and manage cybersecurity requirements.
• Develop and maintain cybersecurity concepts for embedded and vehicle systems.
• Support compliance with UN R155 and UN R156 regulations.
• Analyze system architectures and identify cybersecurity risks and mitigation strategies.
• Collaborate with cross-functional engineering teams to implement cybersecurity controls.
• Support security reviews, verification, and validation activities.
• Contribute to secure product development processes and best practices.

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Cyber Security, Electrical Engineering, or a related field.
• Experience working with product cybersecurity in embedded or automotive environments.
• Practical knowledge of:
• ISO/SAE 21434
• UN R155 / UN R156
• TARA methodologies
• Security requirements engineering
• Security concept development
• Understanding of:
• Secure communication protocols
• Secure Boot
• Cryptographic key management
• Secure software and firmware updates (OTA)
• Ability to work independently and in international, cross-functional teams

What We Offer

• Opportunity to work on cybersecurity for advanced connected products used worldwide.
• Long-term cooperation in an international engineering environment.
• Flexible remote or hybrid working model depending on the project
• Access to challenging projects, modern technologies, and continuous professional development.