Automotive Systems Cybersecurity Engineer

LER TechForce; Auburn Hills (MI); On-site; USD 90,000 - 130,000; Full time

Job summary

LER TechForce is seeking an automotive cybersecurity professional to run vulnerability evaluation and fuzzing across protocols, hardware, and software for automotive applications. You will help shape security concepts and requirements across vehicle systems, supporting architecture, threat analysis, and testing within ISO/SAE 21434 frameworks.

The role involves collaboration with cross-functional teams, ensuring security controls and verification activities align with customer program timing and

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Security and Assurance, Information Technology, or related field required.
• 1-5 years of experience in automotive cybersecurity, vehicle electronics, embedded systems, IT security, or related cybersecurity domains.
• Understanding of end-to-end connected vehicle (telematics and infotainment) and wired/wireless communication protocols (CAN, J1939, CAN-FD, UDS, Flex-Ray, Ethernet, Bluetooth, Wi-Fi, etc.).
• Experience addressing vehicle development (E/E architectures, embedded and systems engineering) and automotive cybersecurity challenges (e.g., security by design, secure boot, control unit, and vehicle network protection).
• Knowledge of standards such as ISO/SAE 21434 and UNECE WP.29 R155/R156 Regulations.
• Experience with ISO/SAE 21434-based processes for TARA, concept development, and testing.
• Experience developing high-level and low-level test plans and test methods, executing test cases manually on a subsystem-level desktop bench, and ability to automate test cases with Bash and Python scripts.
• Good understanding of communication functions among all layers in the OSI Model.
• Familiarity with securing embedded platforms, including embedded Linux (SELinux, Yocto/Debian hardening), RTOS, secure boot, and HSM/secure elements.
• Familiarity with cybersecurity frameworks such as Auto-ISAC ATM, MITRE ATT&CK, MITRE EMB3D, PTES, and NIST 800-115.

Responsibilities

• Run vulnerability evaluation and fuzzing of protocols, hardware, and software for automotive applications.
• Enable innovative new development and processes in the approach and execution of highly technical systems and components for customers.
• Develop and maintain a cybersecurity plan to meet customer program timing.
• Create/review Item Definition and perform Threat Analysis and Risk Assessment (TARA) as per ISO/SAE 21434 and OEM cybersecurity process.
• Define Cybersecurity Concepts and Security Goals during concept and development phases.
• Derive and document Cybersecurity Requirements at vehicle, system, and component levels.
• Support the design of Cybersecurity Architecture, including trust boundaries, data flows, and control mechanisms.
• Identify and define appropriate Security Controls aligned with identified threats.
• Support vehicle type approval process (R155/R156).
• Define and perform verification and validation testing, including fuzz testing and penetration testing.
• Support cybersecurity reviews, process audits, and cybersecurity assessments.

Skills

Automotive cybersecurity

Embedded systems

Penetration testing

Python scripting

C/C++

CAN protocols

TCP/IP networking

Security by design

Secure boot

Threat modeling

Education

Bachelor's degree in Cybersecurity or related field

Tools

Metasploit

Wireshark

Kali Linux

Ncat

Wfuzz

Job description

• Run vulnerability evaluation and fuzzing of protocols, hardware, and software for automotive applications.
• Enable innovative new development and processes in the approach and execution of highly technical systems and components for customers.
• Develop and maintain a cybersecurity plan to meet customer program timing.
• Create/review Item Definition and perform Threat Analysis and Risk Assessment (TARA) as per ISO/SAE 21434 and OEM cybersecurity process.
• Define Cybersecurity Concepts and Security Goals during concept and development phases.
• Derive and document Cybersecurity Requirements at vehicle, system, and component levels.
• Support the design of Cybersecurity Architecture, including trust boundaries, data flows, and control mechanisms.
• Identify and define appropriate Security Controls aligned with identified threats.
• Support vehicle type approval process (R155/R156).
• Define and perform verification and validation testing, including fuzz testing and penetration testing.
• Support cybersecurity reviews, process audits, and cybersecurity assessments.

What you'll need to be successful:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Security and Assurance, Information Technology, or related field required.
• 1-5 years of experience in automotive cybersecurity, vehicle electronics, embedded systems, IT security, or related cybersecurity domains.
• Understanding of end-to-end connected vehicle (telematics and infotainment) and wired/wireless communication protocols (CAN, J1939, CAN-FD, UDS, Flex-Ray, Ethernet, Bluetooth, Wi-Fi, etc.).
• Experience addressing vehicle development (E/E architectures, embedded and systems engineering) and automotive cybersecurity challenges (e.g., security by design, secure boot, control unit, and vehicle network protection).
• Knowledge of standards such as ISO/SAE 21434 and UNECE WP.29 R155/R156 Regulations.
• Experience with ISO/SAE 21434-based processes for TARA, concept development, and testing.
• Experience developing high-level and low-level test plans and test methods, executing test cases manually on a subsystem-level desktop bench, and ability to automate test cases with Bash and Python scripts.
• Good understanding of communication functions among all layers in the OSI Model.
• Familiarity with securing embedded platforms, including embedded Linux (SELinux, Yocto/Debian hardening), RTOS, secure boot, and HSM/secure elements.
• Familiarity with cybersecurity frameworks such as Auto-ISAC ATM, MITRE ATT&CK, MITRE EMB3D, PTES, and NIST 800-115.

Preferred:

• Working knowledge of IEC 62443 standard series.
• Working experience with software coding in C, C++, and Python.
• Knowledge of vehicle cybersecurity standard SAE J3061.
• Knowledge of HSM modules, key provisioning, securing mobile apps, and know-how regarding tampering and reverse engineering techniques.
• Experience in AUTOSAR software development or integration projects.
• Deep understanding of OS and kernel architecture (e.g., QNX, Linux, Android, etc.).
• Working experience using open-source testing tools such as Ncat, Metasploit, and Wfuzz, along with Kali Linux utilities.
• Expert-level understanding of TCP/IP networking, routing protocols, and full packet capture analysis using tools like Wireshark.
• Hands-on experience in penetration testing, fuzz testing tools, and product security/deployment.
• Cybersecurity certifications such as EC-Council CEH, SANS GIAC, and Offensive Security OSCP.
• Ability to handle tasks with significant complexity under minimal supervision requiring a high degree of technical competence.
• Ability to interact dynamically with cross-functional global teams.
• Ability to present and speak to customers and work at customer sites to deliver engineering services in alignment with customer processes and procedures.