Product Cyber Security Engineer

Sigma Embedded Engineering; Kraków; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Flexible remote/hybrid work

International engineering environment

Job summary

Sigma Embedded Engineering in Kraków is seeking a Product Cyber Security Engineer to define and implement cybersecurity measures for embedded and vehicle-like systems across the product lifecycle.

You will work with system architects and software teams to ensure ISO/SAE 21434 compliance, perform TARA, manage security requirements, and support OTA security and secure boot.

The role offers a flexible remote or hybrid working model and opportunities to shape security across global connected products.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cyber Security, Electrical Engineering or related field.
• Experience in product cybersecurity for embedded or automotive environments.
• Knowledge of ISO/SAE 21434.
• Knowledge of UN R155/156.
• Familiar with TARA methodologies.
• Security requirements engineering.
• Security concept development.
• Understanding of secure communication protocols.
• Secure Boot.
• Cryptographic key management.
• OTA security for software/firmware updates.
• Ability to work independently and in international, cross-functional teams.

Responsibilities

• Perform cybersecurity engineering activities according to ISO/SAE 21434.
• Conduct Threat Analysis and Risk Assessments (TARA).
• Define and manage cybersecurity requirements.
• Develop and maintain cybersecurity concepts for embedded and vehicle systems.
• Support compliance with UN R155 and UN R156 regulations.
• Analyze system architectures and identify cybersecurity risks and mitigation strategies.
• Collaborate with cross-functional engineering teams to implement cybersecurity controls.
• Support security reviews, verification, and validation activities.
• Contribute to secure product development processes and best practices.

Skills

Embedded systems

Automotive security

ISO 21434

UN R155/156

TARA methods

Security requirements

Security concepts

Secure protocols

Secure Boot

Key management

OTA security

Cross-functional teams

Education

Bachelor's degree

Master's degree

Job description

We are looking for a Product Cyber Security Engineer to support the development of next-generation connected products for a leading global manufacturer of power and propulsion solutions.

The role focuses on defining and implementing cybersecurity measures for embedded and vehicle-like systems, ensuring compliance with industry standards and regulatory requirements. You will work closely with system architects, software developers, and product teams throughout the entire product lifecycle.

Key Responsibilities

• Perform cybersecurity engineering activities according to ISO/SAE 21434.
• Conduct Threat Analysis and Risk Assessments (TARA).
• Define and manage cybersecurity requirements.
• Develop and maintain cybersecurity concepts for embedded and vehicle systems.
• Support compliance with UN R155 and UN R156 regulations.
• Analyze system architectures and identify cybersecurity risks and mitigation strategies.
• Collaborate with cross-functional engineering teams to implement cybersecurity controls.
• Support security reviews, verification, and validation activities.
• Contribute to secure product development processes and best practices.

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Cyber Security, Electrical Engineering, or a related field.
• Experience working with product cybersecurity in embedded or automotive environments.
• Practical knowledge of:
• ISO/SAE 21434
• UN R155 / UN R156
• TARA methodologies
• Security requirements engineering
• Security concept development
• Understanding of:
• Secure communication protocols
• Secure Boot
• Cryptographic key management
• Secure software and firmware updates (OTA)
• Ability to work independently and in international, cross-functional teams

What We Offer

• Opportunity to work on cybersecurity for advanced connected products used worldwide.
• Long-term cooperation in an international engineering environment.
• Flexible remote or hybrid working model depending on the project
• Access to challenging projects, modern technologies, and continuous professional development.