Cybersecurity System and Requirements Engineer

About the role

The Cybersecurity System and Requirements Engineer ensures that cybersecurity considerations are integrated across software, hardware, and system teams. You will translate product requirements with security impact into concrete technical specifications and architecture for automotive embedded systems.

Key responsibilities

• Develop, maintain, and support cybersecurity plans, strategies, and documentation for automotive embedded systems.
• Coordinate cybersecurity topics and risk‑mitigation efforts across product development, manufacturing, testing, and software engineering teams.
• Perform assessments, identify vulnerabilities, and implement mitigation strategies.
• Provide consulting on analysis, remediation, and patching of open‑source and third‑party components.
• Drive secure software development practices, including secure coding, unit testing, static and dynamic analysis, and fuzz testing.
• Conduct threat modeling, design reviews, and security evaluations for new technologies and architectures.
• Collaborate with cross‑functional teams to develop cyber‑resilient automotive platforms.
• Communicate risks, emerging threats, and recommendations to engineering and leadership.

Required profile

• Bachelor’s degree in Computer Engineering, Electrical Engineering, Cybersecurity or related field (Master’s preferred).
• 3+ years of experience in automotive, consumer electronics, embedded systems or cybersecurity.
• Experience with low‑level software development (C, Assembly) and embedded networking, cryptography, and secure communications.

Required skills

• C programming
• Assembly language
• Cryptography and secure communications
• Embedded networking protocols (CAN, CAN‑FD, Automotive Ethernet)
• Automotive cybersecurity standards (ISO 21434, UNECE R155, UNECE R156, Automotive SPICE)
• Hardware security technologies (HSM, secure hardware extensions, trusted execution environments)
• Automotive software architectures (AUTOSAR, DDS, ROS2/SROS2)
• Threat modeling, vulnerability analysis, risk assessment
• Secure coding, unit testing, static and dynamic code analysis, fuzz testing