Senior Cybersecurity & OTA Engineer

Korn Ferry; Loveland (CO); On-site; USD 150,000 - 180,000; Full time

Job summary

Korn Ferry is seeking a Senior Cybersecurity & OTA Engineer in Loveland, CO to lead the design, development, and integration of on‑vehicle cybersecurity and OTA update systems for future vehicles.

You will influence vehicle electrical systems from concept through manufacturing launch, managing threat analyses, cybersecurity goals, and OTA architecture while mentoring junior engineers.

Qualifications

• BS in Engineering, Computer Science, or Cybersecurity.
• 5+ years in cybersecurity engineering, preferably in automotive or heavy‑duty vehicle systems.

Responsibilities

• Conduct Threat Analysis and Risk Assessment (TARA) for vehicle E/E systems.
• Define cybersecurity goals, requirements, and specifications for on‑vehicle assets.
• Develop and maintain the vehicle cybersecurity management system (CSMS) and ensure lifecycle compliance.
• Design and implement OTA update architecture including secure boot, code signing, version management, rollback mechanisms and update orchestration.
• Oversee cybersecurity validation and verification activities including penetration testing and vulnerability assessments.
• Collaborate with E/E and software teams to integrate cybersecurity controls into the vehicle network architecture (CAN, Ethernet).
• Support functional safety analysis and ensure cybersecurity measures do not compromise safety.
• Collaborate with suppliers to ensure third‑party components meet cybersecurity requirements.

Skills

Threat analysis

Cybersecurity lifecycle management

Vehicle network security (CAN, J1939)

OTA updates

Secure boot & code signing

Penetration testing

Mentoring & leadership

Education

Bachelor of Science in Engineering, CS, or Cybersecurity

5+ years cybersecurity engineering experience

Tools

ISO 21434 knowledge

J1939 / CAN bus familiarity

OTA architecture tools

Job description

POSITION TITLE: Senior Cybersecurity & OTA Engineer

LOCATON: Loveland CO

COMPENSATION: $150,000–$180,000 base (+ performance-based bonus and benefits)

Korn Ferry has partnered with our client, one of the leading U.S. transit bus manufacturers, playing a critical role in the national transition to zero-emission vehicles.

This role will be responsible for the overall design, development, and integration of our on-vehicle cybersecurity and over-the-air (OTA) update systems for all future vehicles. You will have direct influence on vehicle electrical systems from concept through to manufacturing launch to field support.

You will be part of the team that develops the industry’s best-in\u2010class zero emission bus. You will focus on item definitions, cybersecurity concepts, threat assessments, cybersecurity goals, component selection, component compliance, cybersecurity lifecycle management and OTA infrastructure.

This is a hands\u2010on Engineering role, located on\u2010site at the Colorado Technology Center (CTC) in Loveland, CO, reporting to the E/E Systems Engineering Manager.

• Conduct Threat Analysis and Risk Assessment (TARA) for vehicle E/E systems
• Define cybersecurity goals, requirements, and specifications for on-vehicle assets
• Develop and maintain the vehicle cybersecurity management system (CSMS) and ensure lifecycle compliance
• Design and implement OTA update architecture including secure boot, code signing, version management, rollback mechanisms and update orchestration
• Oversee cybersecurity validation and verification activities including penetration testing and vulnerability assessments
• Collaborate with E/E and software teams to integrate cybersecurity controls into the vehicle network architecture (CAN, Ethernet)
• Support functional safety analysis and ensure cybersecurity measures do not compromise safety
• Collaborate with suppliers to ensure third\u2011party components and subsystems meet cybersecurity requirements and compliance
• Mentor and provide technical direction for junior engineers on cybersecurity and OTA best practices
• Guide company direction for on-vehicle cybersecurity goals
• Analyze and provide feedback to customer and industry requirements and standards

SCOPE OF THE ROLE

• Autonomy: Ability to work independently with review at critical points.
• Technically Minded: Apply industry practices and standards and provide input and advice to other staff members on cybersecurity practices. Exhibit advanced wide-ranging experience, using in-depth professional knowledge, acumen, concepts and company objectives to develop and resolve complex cybersecurity challenges.
• Time Management: Work productively with cross\u2010functional teams to deliver projects on schedule and on budget.
• Communication: Collaborate and teach up, down and across the organization to help raise the skills and knowledge of the team. Adapt style to differing audiences and adept at persuasion on complex subjects.
• Complexity: Assignments are broad in scope and highly complex that require outstanding creativity, superior initiative, good judgement, and leadership skills. Work on problems with diverse scope, where analysis of information requires evaluation of identifiable factors. Devise solutions based on limited information and precedent and adapt existing approaches to resolve issues. Use evaluation, judgment, and interpretation to select the right course of action.
• Quality & Standards: Cybersecurity documentation, threat models, and risk assessments are accurate and complete. Released designs meet all cybersecurity objectives, compliance requirements, & customer specifications.

BASIC QUALIFICATIONS

• Bachelor of Science (BS) in Engineering, Computer Science, or Cybersecurity.
• 5+ years experience in cybersecurity engineering (preferably in automotive, commercial, or heavy\u2010duty vehicle systems.)

Direct experience with:

• Threat analysis and risk assessment (TARA), cybersecurity concept development, and cybersecurity lifecycle management
• Vehicle network security for CAN bus and J1939 protocols
• OTA update systems design, deployment, and validation including secure boot, firmware signing, and delta update strategies

Familiarity with:

• Heavy\u2010duty vehicle E/E architectures and connected vehicle ecosystems.
• Functional safety standards (ISO 26262) and their interaction with cybersecurity requirements.
• Experience with cybersecurity standards (ISO 21434) is preferred.
• Experience in on\u2010vehicle networking, OTA updates and penetration testing is a plus.