[LTA-T&ID] PRP / SENIOR / EXECUTIVE CYBERSECURITY ENGINEER, AV CYBERSECURITY

Land Transport Authority; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

Land Transport Authority (LTA) invites a Principal / Senior / Executive Cybersecurity Engineer in AV cybersecurity to lead the assurance framework for autonomous vehicles. You will drive regulatory frameworks, assess submissions, and shape security across the AV lifecycle.

You will also secure CAM's DevSecOps practices and mentor junior engineers. You will collaborate with local and international partners, align with R155/R156, CSMS and ISO/SAE 21434, and help build a robust, safety-first

Qualifications

• Knowledge of computer science, cybersecurity or related field.
• Ability to reason about threats and risk with safety implications.
• Eagerness to learn vehicle regulations (R155, R156, ISO/SAE 21434).
• Clear communication to technical and non-technical audiences.
• Proactivity to shape standards and practices for AV cybersecurity.
• Familiarity with automotive cybersecurity standards and regulations (R155/R156, CSMS, TARA).
• Experience with automotive/OT or embedded/safety-critical systems security.
• Hands-on DevSecOps: secure SDLC, CI/CD security, cloud security (AWS), SAST/DAST tools.
• Experience with security tooling (SIEM, WAF, IPS, PAM, DLP).
• Professional accreditations such as CISSP, CISM, CRISC, GICSP, GCIH or OSCP.

Responsibilities

• Drive development of AV cybersecurity assurance framework and criteria.
• Assess cybersecurity submissions against assurance criteria using TARA and ISO/SAE 21434.
• Define secure OTA software update expectations and manage cyber risk in AV supply chain.
• Establish monitoring, detection and incident response requirements for AVs.
• Maintain policies, standards, playbooks and engage with partners and international fora.
• Work with Systems team to embed security in SDLC from design to production.
• Conduct security reviews of architecture and code, provide remediation guidance.
• Set up automated security testing in CI/CD pipelines and assist with incidents.
• As senior, own end-to-end assurance framework and mentor engineers.

Skills

Regulatory risk analysis

Cybersecurity governance

Threat modeling

DevSecOps

Security architecture

Cloud security

Stakeholder communication

Mentoring

Education

Bachelor in CS/Cybersecurity

Tools

SIEM

WAF

PAM

DLP

Job description

What the role is:

PRINCIPAL / SENIOR / EXECUTIVE CYBERSECURITY ENGINEER, AV CYBERSECURITY

What you will be working on:

Centre for Autonomous Mobility (CAM) leads Singapore's national effort to deploy autonomous vehicles (AVs) at scale. As AVs move onto public roads, their cybersecurity becomes a matter of public safety: a compromised vehicle is not just a data breach but a physical risk. You will be part of the cybersecurity team responsible for developing the cybersecurity assurance regime for AVs, to ensure autonomous vehicles are deployed safely and securely in Singapore. You will drive to grow into AV cybersecurity. You will help build the function from the ground up assuring the cybersecurity of AVs themselves, and securing the systems CAM builds to oversee them.

Your responsibilities:

• Drive the development of the regulatory framework for AVs, such as establishing requirements for a Cyber Security Management System (CSMS) that covers the vehicle's lifecycle - development, production and deployment.
• Assess AV developers' cybersecurity submissions against our assurance criteria, applying Threat Analysis and Risk Assessment (TARA) and the R155 Annex 5 threats and controls, as well as standards such as ISO/SAE 21434.
• Define expectations for secure over-the-air software updates in line with the intent of UN R156 (a Software Update Management System), and for managing cyber risk across the AV supply chain.
• Establish monitoring, detection and incident response requirements for AVs, including analysing threats, vulnerabilities and mitigations to contribute to collective knowledge for the AV ecosystem.
• Maintain the policies, standards and playbooks for AV cybersecurity, and support engagement with local partners and international fora (e.g. UNECE WP.29 / GRVA).

Help secure CAM's digital products / DevSecOps (secondary)

The other part of the team's remit is making sure the systems CAM builds to regulate and monitor AVs - such as the Autonomous Vehicle Monitoring System - are themselves secure by design.

• Work with the Systems team to build security into the software development lifecycle, from design through CI/CD to production.
• Conduct security architecture and design reviews and risk assessments of CAM's systems, and provide and implement remediation recommendations.
• Support security reviews of application code and architecture, and help design secure-by-default components.
• Set up automated security testing - SAST/DAST, dependency and secrets scanning, and infrastructure-as-code checks - in the delivery pipeline.
• Assist with breach detection and incident response for these products.

Help build the function

• As you grow into the role, you will naturally spot gaps and suggest tools, processes and improvements as the team and its remit grow.
• Evaluate emerging security technologies and recommend tools and approaches for the team to adopt.
• Provide security advice to CAM project teams on design and architecture decisions, and help build a security-minded culture across CAM, working alongside engineers, AV developers and agency partners.

For more senior hire, you will:

• Own and drive the AV cybersecurity assurance framework end to end, and set the assurance criteria AV developers must meet.
• Lead assessments of AV developers' cybersecurity management systems and act as a technical authority in deployment-approval decisions on cybersecurity assurance adequacy.
• Help establish security architecture governance and compliance with relevant frameworks.
• Lead cybersecurity incident response for the AV fleet and our products, and define the team's tooling, standards and processes.
• Mentor junior engineers and help grow the team.

What we are looking for:

• Knowledge preferably in Computer Science, Cybersecurity or a related field
• Thinks analytically about risk - can reason about threats, weigh trade-offs, and understand the limits of a cybersecurity control on safety outcomes.
• Eager to learn vehicle regulations - genuinely interested in standards and frameworks like R155, and able to pick them up quickly.
• Communicates clearly - can explain security issues to both technical and non-technical people.
• Takes initiative and cares about the public good - this is new ground, so you will help shape the standards rather than inherit them.
• Familiarity with automotive / vehicle cybersecurity standards and regulation - UN R155 and R156, ISO/SAE 21434, CSMS and TARA - or a track record of picking up new regulatory frameworks quickly.
• Exposure to automotive, operational-technology (OT) or embedded / safety-critical systems security, including security architecture of cloud-native applications and/or OT systems.
• Hands-on DevSecOps experience: secure SDLC, CI/CD pipeline security, cloud security (e.g. AWS), and SAST/DAST tooling.
• Hands-on experience with security tools such as SIEM, WAF, IPS, privileged access management (PAM), or data loss prevention (DLP).
• Professional accreditations such as CISSP, CISM, CRISC, GICSP, GCIH or OSCP.
• A strong interest in autonomous vehicles, emerging mobility technology and overall vehicular safety.

About Land Transport Authority

Land Transport Authority (LTA) is a statutory board under Ministry of Transport that spearheads land transport developments in Singapore. We are seeking dynamic, energetic, highly motivated, passionate and qualified professionals to join us.Many opportunities & challenges await those who are keen on an exciting career to realise our commitment to envision & implement an integrated transport system.