Cybersecurity Engineer

Dana Incorporated; Novi (MI); On-site; USD 110,000 - 150,000; Full time

Job summary

Dana Incorporated is seeking a Cybersecurity Engineer in Novi, MI to advance secure, robust ECU solutions for light-vehicle electrification. You will work with system engineering leads to implement hardware and software security controls across AUTOSAR stacks.

The role requires 4+ years of embedded software experience, automotive cybersecurity expertise, and strong cryptography knowledge. Collaboration with hardware, software, and safety teams is essential to meet stakeholder requirements.

Qualifications

• 4+ years of experience in embedded software development (C, C++, AUTOSAR).
• Experience in embedded cybersecurity (automotive preferred).
• Expert knowledge of cryptography.
• Knowledge of industry standards related to cybersecurity (UNECE WP.29, ISO/SAE 21434).
• Excellent communication and analytical skills; able to work independently.
• Experience with Jira, Polarion, Azure or similar tools; ASPICE and ISO26262 knowledge.

Responsibilities

• Configure, integrate and test AUTOSAR-based ECU cybersecurity software stack.
• Integrate HSM-based secure core of ECU with the host core.
• Configure HSM to provide authenticated boot and firmware update.
• Support cybersecurity activities to harden HW/SW against cyber-attack.
• Support cybersecurity risk assessments and threat modeling for the product.
• Follow ASPICE cybersecurity process and collaborate with hardware, software and functional safety teams.

Skills

Embedded software development

C/C++

AUTOSAR

Embedded cybersecurity

Cryptography

Security standards

Education

Bachelor’s degree in Engineering, Computer Science, or related discipline

Cybersecurity certifications a plus

Tools

Jira

Polarion

Azure DevOps

Job description

Dana is a global leader in the supply of highly engineered driveline, sealing, and thermal-management technologies that improve the efficiency and performance of vehicles with both conventional and alternative-energy powertrains. Serving two primary markets – passenger vehicle and commercial truck equipment – Dana provides the world’s original-equipment manufacturers and the aftermarket with local product and service support through a network of nearly 100 engineering, manufacturing, and distribution facilities.

Job Purpose

The cybersecurity engineer works within light vehicle electrification business unit and in collaboration with the system engineering leads to contribute to the development of a secure and robust solution covering both hardware and software which may include hardware trust anchor, secure on-board communication, secure bootloader, secure update, and other security controls.

Job Duties and Responsibilities

• · Configure, integrate and test AUTOSAR based ECU cybersecurity software stack
• · Integrate HSM based secure core of ECU with the host core
• · Configure HSM to provide authenticated boot and authenticated firmware update
• · Support cybersecurity activities, such as hardening ECU HW & SW against cyber-attack, as assigned per project in relation to meeting stakeholder requirements
• · Support cybersecurity requirements analysis with customers and prepare cybersecurity case to ensure product will meet cybersecurity goals
• · Support the decomposition of cybersecurity requirements from stakeholder requirements and work closely with hardware, software, and functional safety team members or vendors to ensure secure technical solution can be achieved; plan and present mitigation activities as required
• · Support cybersecurity risk assessments and threat modeling as related to the specified product
• · Support projects during quoting process by analyzing cybersecurity requirements, providing effort estimates, and cross-referencing to the product offerings
• · In collaboration with global Dana cybersecurity team, follow ASPICE cybersecurity process, methods and tools development within light vehicle business unit as needed
• · Assist in cybersecurity training and awareness within the business unit as needed

EDUCATION and QUALIFICATIONS:

• · 4+ years of experience in embedded software development (C, C++, AUTOSAR)
• · Experience in embedded cybersecurity (automotive preferred)
• · Expert knowledge of cryptography
• · Knowledge of industry standards related to cybersecurity (UNECE WP.29, ISO/SAE 21434, etc.)
• · Excellent communication and analytical skill
• · Excellent organizational skills as demonstrated through executed production programs
• · Experience with Jira, Polarion, Azure or similar tools
• · Ability to work independently as required and take ownership of project deliverables
• · Knowledge of ASPICE and ISO26262.

Education

• · Bachelor’s degree in Engineering, Computer Science, or related discipline
• · Certifications in cybersecurity is a plus

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class.