Cybersecurity Engineer IRC302487

GlobalLogic; Göteborgs kommun; On-site; SEK 700,000 - 900,000; Full time

Job summary

GlobalLogic is seeking a Cybersecurity Engineer within the System Design department to drive the technical decomposition of cybersecurity requirements into verifiable architecture-level constraints. You will define trust boundaries, attack surfaces, and defense-in-depth strategies while aligning with CRA, ISO/SAE 21434, and UNECE R155/R156 requirements throughout the V-model lifecycle.

You will translate stakeholder requirements into architecture-level and system-level technical requirements,

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Systems Engineering, Electrical Engineering, or a related technical field.
• Demonstrated experience in systems and requirements engineering, specifically in requirement decomposition, allocation, and traceability across system hierarchies.
• Solid technical grounding in secure system design principles, trust boundaries, defense-in-depth, least privilege, secure-by-design/secure-by-default, threat modeling (e.g., STRIDE, attack trees), and secure coding guidelines.
• Proven ability to translate stakeholder and regulatory requirements into both architecture-level and system-level technical requirements.
• Working knowledge of requirements management tooling such as IBM DOORS, Polarion, Jama, or similar applications.
• Familiarity with cybersecurity standards and regulations, including the EU Cyber Resilience Act (CRA), ISO/SAE 21434, IEC 62443, UNECE R155/R156, NIST Cybersecurity Framework, ISO/IEC 27001, or equivalents.
• Strong ability to interpret technical and regulatory standards and convert them into precise, verifiable engineering and architecture requirements.
• Exposure to threat and risk assessment methodology and its linkage to architectural security controls is considered a plus.

Responsibilities

• Requirements Translation: Analyze inputs from cybersecurity stakeholders, customers, and regulatory bodies (CRA, ISO/SAE 21434, IEC 62443, UNECE R155) and translate them into coherent system and sub-system security requirements.
• Security Architecture: Contribute to system design security architecture by defining trust boundaries, security zones and conduits, and conducting data flow and attack surface analysis. Select appropriate security controls (such as authentication, secure communication, cryptographic key management, secure boot, and access control) in collaboration with system architects.
• Requirement Decomposition: Decompose outputs from threat and risk assessments into concrete, verifiable security requirements at the system, sub-system, and component levels. Maintain bidirectional traceability from the threat scenario to the implemented control.
• Architecture Collaboration: Partner with system architects during trade studies to evaluate the security impacts of design alternatives, including segmentation strategy, interface exposure, protocol selection, and HSM/TPM usage
• Regulatory Alignment: Drive alignment with cybersecurity compliance and regulatory teams to ensure that the architecture and requirements satisfy applicable standards and type-approval obligations
• Cross-Functional Alignment: Drive technical alignment across systems engineering, software development, verification, functional safety, and cybersecurity teams to resolve conflicting requirements and design constraints.
• Continuous Improvement: Contribute to the continuous improvement of cybersecurity engineering processes, requirement templates, security architecture patterns, and reusable design guidance

Skills

Secure system design

Threat modeling

Requirements decomposition

Regulatory interpretation

Requirements tooling familiarity

Education

Bachelor’s or Master’s degree in CS/Cybersecurity/Systems Engineering or related field

Job description

Description

As a Cybersecurity Engineer within the System Design department, you will operate at the intersection of security architecture and systems engineering. Your primary focus will be driving the technical decomposition of cybersecurity requirements into verifiable, architecture-level design constraints. You will contribute directly to the product’s security architecture by defining trust boundaries, attack surfaces, security controls, and defense-in-depth strategies. Additionally, you will ensure that stakeholder requirements and regulatory obligations (such as CRA, ISO/SAE 21434, and UNECE R155/R156) are integrated into the system from the concept phase rather than being retrofitted. You will serve as the crucial technical link between cybersecurity governance, risk assessment outputs, and the engineering teams responsible for system and software design. Ultimately, you will ensure that every security requirement is architecturally grounded, technically feasible, testable, and traceable across the entire V-model.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Systems Engineering, Electrical Engineering, or a related technical field
• Demonstrated experience in systems and requirements engineering, specifically in requirement decomposition, allocation, and traceability across system hierarchies
• Solid technical grounding in secure system design principles, trust boundaries, defense-in-depth, least privilege, secure-by-design/secure-by-default, threat modeling (e.g., STRIDE, attack trees), and secure coding guidelines
• Proven ability to translate stakeholder and regulatory requirements into both architecture-level and system-level technical requirements.
• Working knowledge of requirements management tooling such as IBM DOORS, Polarion, Jama, or similar applications.
• Familiarity with cybersecurity standards and regulations, including the EU Cyber Resilience Act (CRA), ISO/SAE 21434, IEC 62443, UNECE R155/R156, NIST Cybersecurity Framework, ISO/IEC 27001, or equivalents.
• Strong ability to interpret technical and regulatory standards and convert them into precise, verifiable engineering and architecture requirements.
• Exposure to threat and risk assessment methodology and its linkage to architectural security controls is considered a plus.

Job responsibilities

• Requirements Translation: Analyze inputs from cybersecurity stakeholders, customers, and regulatory bodies (CRA, ISO/SAE 21434, IEC 62443, UNECE R155) and translate them into coherent system and sub-system security requirements.
• Security Architecture: Contribute to system design security architecture by defining trust boundaries, security zones and conduits, and conducting data flow and attack surface analysis. Select appropriate security controls (such as authentication, secure communication, cryptographic key management, secure boot, and access control) in collaboration with system architects.
• Requirement Decomposition: Decompose outputs from threat and risk assessments into concrete, verifiable security requirements at the system, sub-system, and component levels. Maintain bidirectional traceability from the threat scenario to the implemented control.
• Architecture Collaboration: Partner with system architects during trade studies to evaluate the security impacts of design alternatives, including segmentation strategy, interface exposure, protocol selection, and HSM/TPM usage
• Regulatory Alignment: Drive alignment with cybersecurity compliance and regulatory teams to ensure that the architecture and requirements satisfy applicable standards and type-approval obligations
• Cross-Functional Alignment: Drive technical alignment across systems engineering, software development, verification, functional safety, and cybersecurity teams to resolve conflicting requirements and design constraints.
• Continuous Improvement: Contribute to the continuous improvement of cybersecurity engineering processes, requirement templates, security architecture patterns, and reusable design guidance

What we offer

Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting‑edge technologies. As a team, we engineer digital products that positively impact people’s lives.

Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well‑being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities: At GlobalLogic, we prioritize work‑life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward‑thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.