Cybersecurity Engineer

Dana Incorporated; Novi (MI); On-site; USD 90,000 - 130,000; Full time

Job summary

Dana Incorporated in Novi, Michigan, seeks a cybersecurity engineer for the light vehicle electrification unit to help develop a secure ECU software stack and robust hardware/software controls. The role includes integrating HSM, secure boot/updates, and cybersecurity risk assessments.

Ideal candidates bring 4+ years in embedded software (C/C++, AUTOSAR), automotive cybersecurity experience, cryptography expertise, knowledge of ASPICE/ISO26262, and strong collaboration skills with hardware,

Qualifications

• Bachelor’s degree in Engineering, Computer Science, or related discipline.
• Certifications in cybersecurity is a plus.
• 4+ years of experience in embedded software development (C, C++, AUTOSAR).
• Experience in embedded cybersecurity (automotive preferred).

Responsibilities

• Configure, integrate and test AUTOSAR-based ECU cybersecurity software stack.
• Integrate HSM based secure core of ECU with the host core.
• Configure HSM to provide authenticated boot and firmware update.
• Support cybersecurity activities to harden ECU hardware and software against cyber-attack.
• Assist in cybersecurity risk assessments and threat modeling for the product.
• Collaborate with hardware, software, and functional safety teams to ensure a secure solution.

Skills

Embedded software development

C/C++

AUTOSAR

Embedded cybersecurity

Cryptography

Cybersecurity standards

Communication

Analytical skills

Education

Bachelor's degree in Engineering/CS

Cybersecurity certifications (plus)

Tools

Jira

Polarion

Azure

Job description

Dana is a global leader in the supply of highly engineered driveline, sealing, and thermal-management technologies that improve the efficiency and performance of vehicles with both conventional and alternative-energy powertrains. Serving two primary markets – passenger vehicle and commercial truck equipment – Dana provides the world's original-equipment manufacturers and the aftermarket with local product and service support through a network of nearly 100 engineering, manufacturing, and distribution facilities.

Job Purpose

The cybersecurity engineer works within light vehicle electrification business unit and in collaboration with the system engineering leads to contribute to the development of a secure and robust solution covering both hardware and software which may include hardware trust anchor, secure on-board communication, secure bootloader, secure update, and other security controls.

Job Duties And Responsibilities

• Configure, integrate and test AUTOSAR based ECU cybersecurity software stack
• Integrate HSM based secure core of ECU with the host core
• Configure HSM to provide authenticated boot and authenticated firmware update
• Support cybersecurity activities, such as hardening ECU HW & SW against cyber-attack, as assigned per project in relation to meeting stakeholder requirements
• Support cybersecurity requirements analysis with customers and prepare cybersecurity case to ensure product will meet cybersecurity goals
• Support the decomposition of cybersecurity requirements from stakeholder requirements and work closely with hardware, software, and functional safety team members or vendors to ensure secure technical solution can be achieved; plan and present mitigation activities as required
• Support cybersecurity risk assessments and threat modeling as related to the specified product
• Support projects during quoting process by analyzing cybersecurity requirements, providing effort estimates, and cross-referencing to the product offerings
• In collaboration with global Dana cybersecurity team, follow ASPICE cybersecurity process, methods and tools development within light vehicle business unit as needed
• Assist in cybersecurity training and awareness within the business unit as needed

EDUCATION and QUALIFICATIONS:

• 4+ years of experience in embedded software development (C, C++, AUTOSAR)
• Experience in embedded cybersecurity (automotive preferred)
• Expert knowledge of cryptography
• Knowledge of industry standards related to cybersecurity (UNECE WP.29, ISO/SAE 21434, etc.)
• Excellent communication and analytical skill
• Excellent organizational skills as demonstrated through executed production programs
• Experience with Jira, Polarion, Azure or similar tools
• Ability to work independently as required and take ownership of project deliverables
• Knowledge of ASPICE and ISO26262.

Education

• Bachelor’s degree in Engineering, Computer Science, or related discipline
• Certifications in cybersecurity is a plus

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class.

Unsolicited Resumes from Third-Party Recruiters

Please note that as per Dana policy, we do not accept unsolicited resumes from third-party recruiters unless such recruiters were engaged to provide candidates for a specified opening. Any employment agency, person or entity that submits an unsolicited resume does so with the understanding that Dana will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.