Embedded Cybersecurity Engineer

Ford; Dearborn (MI); Hybrid; USD 85,000 - 167,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Tuition assistance

Vehicle discount program

Paid time off & holidays

Parental leave

Job summary

Ford is seeking a Vehicle Cyber Security Engineer to help shape product development security for vehicles, including Next-Gen Network Architecture, Diagnostics, and Autonomous Vehicle initiatives. The role focuses on applying cybersecurity requirements throughout the product lifecycle and collaborating with suppliers to ensure secure by design.

The position requires a Bachelor's degree in a relevant field or equivalent experience, 5+ years in embedded/IoT cybersecurity, and expertise in

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or related domains or an equivalent mix of education and experience.
• 5+ years of embedded, IoT and/or product systems cybersecurity.
• Functional knowledge of cryptographic controls and strategies for their application.
• Experience with security system engineering, development, and testing.
• Experience maintaining engineering documentation including requirements and test plans.

Responsibilities

• Perform assessments on content supporting Ford's product lines.
• Deliver compliance reviews on features, platforms, and modules per Ford cybersecurity process.
• Apply cybersecurity requirements, standards and regulations (ISO 21434 / R155).
• Engineer cybersecurity requirements into product design and lifecycle from ideation to testing.
• Review supplier deliverables for conformance with cybersecurity requirements.
• Collaborate with content owners to ensure security by design.
• Ensure features and components are designed using threat models and risk assessments.
• Leverage global supplier expertise to meet cybersecurity expectations.
• Create and deliver risk reviews to management when controls are insufficient.
• Support reuse model to reduce duplicated work across programs.

Skills

Embedded security

IoT security

Cybersecurity

Cryptographic controls

Independent worker

Communication skills

Education

Bachelor's degree in CS/CE or related

Job description

Enterprise Technology plays a critical part in shaping the future of mobility. If you're looking for the chance to leverage advanced technology to redefine the transportation landscape, enhance the customer experience and improve people's lives, this is the opportunity for you. Join us and challenge your IT expertise and analytical skills to help create vehicles that are as smart as you are.

The Vehicle Cyber Security Engineer serves a key role in shaping the future of product development security for vehicles (e.g. Next-Gen Network Architecture, Diagnostics, Autonomous Vehicle, Ford Smart Mobility, and Offensive Security Analysis).

Key Responsibilities

• Perform assessments on content supporting Ford's product lines

• Deliver Compliance reviews on features, functions, platforms, and modules as defined in the Ford Cybersecurity engineering process in compliance with relevant global

• Cybersecurity requirements, standards, and regulations such as ISO 21434 / R155

• Identify and engineer applicable Cybersecurity requirements into product design and development life cycle from ideation to testing with required deliverables

• Review and approve/reject supplier deliverables for conformance with existing Cybersecurity requirements.

• Work with content owners to manage progression through the development process to ensure security by design from inception

• Ensure features, components, systems are designed using robust engineering processes including threat analysis, risk assessment, adoption of security requirements, security audits, and vehicle ecosystem assessments

• Develop and utilize global supplier expertise to meet cyber security expectations

• Create and deliver risk reviews to management for concerns not mitigated through controls (security governance board, chief engineers, executive leadership, and related roles)

• Support the re-use model incorporated into the CSMS to reduce reapplication of work across vehicle programs.

Requirements & Experience

• Bachelor's degree in Computer Science, Computer Engineering, or related domains OR a combination of education and experience.
• 5+ years of experience with embedded, IoT and/or product systems Cybersecurity
• Functional knowledge of cryptographic controls and strategies for their application.
• Experience with security system engineering, development, and testing
• Experience developing and maintaining engineering documentation including requirements, specifications, test plans, etc.
• Self-starter with ability to work independently and collaboratively
• Strong communication and analytical skills

Preferred Qualifications

• Certified in CISSP or Security+
• Relevant experience with vulnerability assessment management
• History with threat modeling using industry standards such as MITRE ATT&CK or STRIDE

Benefits

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year's Day
• Paid time off and the option to purchase additional vacation time.

This position is a salary grade 6-7 and ranges from $85,400-$166,600.

Final determination of salary grade will be based on candidate's skills and experience, and base salary will be set within the applicable range according to job scope, responsibility and competitive market value.

Visa sponsorship is not available for this position.

Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, if you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660.

This position is hybrid with a requirement to be onsite four or more days per week.