Cyber Security Engineer

FEV North America, Inc.; Auburn Hills (MI); On-site; USD 100,000 - 150,000; Full time

Job summary

FEV North America, Inc. is seeking a Cyber Security Engineer to advance cybersecurity for automotive applications. You will develop plans, perform TARA, and define security goals across vehicle and component levels.

The role requires hands-on testing, security architecture work, and collaboration with global teams to enable secure vehicle development and deployment.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems or related field is required.
• 1–5 years in automotive cybersecurity, vehicle electronics, embedded systems, IT security or related domains.
• Understanding of connected vehicle networks and protocols (CAN, J1939, CAN-FD, UDS, Ethernet, Bluetooth, Wi‑Fi).
• Experience with ISO/SAE 21434, UNECE WP.29 R155/R156 and security by design concepts.
• Experience writing test plans, executing tests and automating tests with scripts (Bash/Python).

Responsibilities

• Develop and maintain a cybersecurity plan to meet program timing.
• Create/review Item Definitions and perform Threat Analysis and Risk Assessment (TARA).
• Define Cybersecurity Concepts and Security Goals during concept and development phases.
• Derive and document Cybersecurity Requirements at vehicle, system, and component levels.
• Support the design of Cybersecurity Architecture with trust boundaries and data flows.
• Identify and define Security Controls aligned with threats.
• Support vehicle type approval processes (R155/R156).
• Define and perform verification and validation testing, including fuzzing and pentesting.
• Support cybersecurity reviews, process audits and assessments.

Skills

Automotive cybersecurity

Threat analysis

Vulnerability assessment

Embedded systems

CAN/J1939/CAN-FD

Security by design

Penetration testing

TCP/IP networking

OS and kernel security

Education

Bachelor's degree in Cybersecurity or related field

Tools

Python

Bash

Wireshark

Kali Linux

Job description

Description

At FEV North America, we work with technology new to the automotive industry and for future mobility solutions and help set the direction for companies when innovating new products and services. We have a strong emphasis on systems, software, hardware, and services that will help create the experiences and features of the future both inside the vehicle and in the cloud and on apps.

Job Type

Full-time

Description

At FEV North America, we work with technology new to the automotive industry and for future mobility solutions and help set the direction for companies when innovating new products and services. We have a strong emphasis on systems, software, hardware, and services that will help create the experiences and features of the future both inside the vehicle and in the cloud and on apps.

We are looking for a Cyber Security Engineer to help run vulnerability valuation and fizzing of protocols, hardware, and software for automotive applications. This role will be deeply involved with enabling innovative new development and processes in the approach and execution of highly technical systems and components for our customers. The ideal candidate brings experience and creativity to find efficient and effective solutions to the challenges that we face.

• Develop and maintain a cybersecurity plan to meet customer program timing
• Create/review Item Definition and perform Threat Analysis and Risk Assessment (TARA) as per ISO/SAE 21434 and OEM cybersecurity process
• Define Cybersecurity Concepts and Security Goals during concept and development phases
• Derive and document Cybersecurity Requirements at vehicle, system, and component levels
• Support the design of Cybersecurity Architecture, including trust boundaries, data flows, and control mechanisms
• Identify and define appropriate Security Controls aligned with identified threats
• Support vehicle type approval process (R155/R156)
• Define and perform verification and validation testing (including fuzz testing and penetration testing)
• Support cybersecurity reviews, process audits and cybersecurity assessments.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Security & Assurance, Information Technology, or related field required.
• 1-5 years of automotive cybersecurity, vehicle electronics, embedded systems, IT security, or related cybersecurity domains.
• Understanding of end-to-end connected vehicle (telematics and infotainment) and wired/wireless communication protocols (CAN, J1939, CAN-FD, UDS, Flex-ray, Ethernet, Bluetooth, Wi-Fi etc.).
• Experience in addressing vehicle development (E/E architectures, embedded and systems engineering) and automotive cybersecurity challenges (e.g., security by design, secure boot, control unit, and vehicle network protection).
• Knowledge of standards like ISO/SAE 21434 and UNECE WP.29 R155/R156 Regulations.
• Experience ISO/SAE 21434-based processes for TARA, concept development, and testing.
• Experience in development of high-level and low-level test plans and test methods along with executing the test cases manually on a subsystem level desktop bench and ability to automate the test cases with Bash and Python scripts.
• Good understanding about communication functions among all the layers in OSI Model.
• Familiarity with securing embedded platforms, including embedded Linux (SELinux, Yocto/Debian hardening), RTOS, secure boot, and HSM/secure elements.
• Familiarity with cybersecurity frameworks such as Auto-ISAC ATM, MITRE ATT&CK, MITRE EMB3D, PTES, and NIST 800-115

Preferred Qualifications

• Working knowledge of IEC 62443 standard series
• Working experience of software coding in C, C++, and python.
• Knowledge on vehicle cybersecurity standard SAE J3061.
• Knowledge over HSM module, Key-provisioning, securing mobile apps, know-hows about tampering and reverse engineering techniques.
• Experience in AUTOSAR software development or integration projects.
• Deep understanding of OS and Kernel architecture (e.g., QNX, Linux, Android etc.)
• Working experience in using any open-source testing tools like Ncat, Metasploit and Wfuzz etc. along with Kali-Linux utilities.
• Expert level understanding of TCP/IP networking, routing protocols and full packet capture analysis using tools like Wire-shark.
• Hands-on experience in penetration testing, fuzz testing tools and product security/deployment.
• Cyber security certifications such as EC-Council CEH, SANS GIAC, and Offensive Security OSCP.
• Ability to handle tasks with significant complexity under minimal supervision requiring a high degree of technical competence.
• Ability to interact dynamically with cross-functional global teams.
• Ability to present and speak to customers along with working at customer site to deliver engineering services in alignment with customer process and procedures.