Senior Embedded Automotive Security Engineer

Trane Italia; Minneapolis (MN); Hybrid; USD 105,000 - 169,000; Full time

Benefits offered by this job

Health insurance

401K match

Tuition assistance

Paid time off

Job summary

Trane Technologies is seeking a Senior Product Security Engineer to lead the secure embedded software lifecycle for next‑gen transport refrigeration and mobile HVAC controls. You will assess risks, drive threat modeling, and oversee CSMS/SUMS processes to meet regulatory type approvals across multiple regions.

You will collaborate with Systems, Hardware, and Software teams to define security requirements, oversee cryptographic assurance, and ensure compliant secure updates and data privacy

Qualifications

• Bachelor’s or Master’s degree in computer engineering, computer science, electrical engineering or related technical field; 5+ years of experience.
• Embedded product security engineer experience or automotive cybersecurity background preferred.
• Proficiency in C, C++, C#, Rust, Python for embedded development.

Responsibilities

• Assess product security risks and develop mitigation strategies.
• Lead security activities including threat modeling, security DFMEA, and penetration testing.
• Coordinate secure over-the-air updates, PKI/certificate management and secure boot implementations.

Skills

Embedded security

Automotive cybersecurity

C programming

C++

C#

Rust

Python

Threat modeling

Security DFMEA

Vulnerability assessment

Penetration testing

ISO/SAE 21434

Secure SDLC

Embedded Linux (Yocto)

RTOS (FreeRTOS/Zephyr)

CAN J1939/CAN FD

TLS

PKI & code signing

Security architecture

Education

Bachelor’s or Master’s degree in computer engineering, computer science, electrical engineering or related technical field

Tools

GitHub Actions

Azure DevOps

CppUTest

Pluma

Yocto

RTOS tools

Job description

Trane Technologies is seeking a Senior Product Security Engineer to lead the secure embedded software lifecycle for next‑gen transport refrigeration and mobile HVAC controls. You will assess risks, drive threat modeling, and oversee CSMS/SUMS processes to meet regulatory type approvals across multiple regions.

You will collaborate with Systems, Hardware, and Software teams to define security requirements, oversee cryptographic assurance, and ensure compliant secure updates and data privacy