Battery Monitoring Cyber Security Engineer, Ford Energy

Ford•Dearborn, MI

22h•$99,100 - $166,200•Hybrid

About The Position

The BESS Battery Monitoring System Cyber Security Engineer will lead the cybersecurity architecture, risk analysis, and validation for Ford Energy’s battery monitoring and BMS-related systems. Working in close coordination with Ford Auto Engineering and Ford Energy technical teams, you will be responsible for securing the BESS environment across embedded firmware, communication pathways, and control logic. This is a critical role ensuring the protection of battery data and control signals against sophisticated threats in a safety-critical infrastructure environment.

Requirements

Bachelor’s degree in Electrical, Computer, or Systems Engineering, Computer Science, or Cybersecurity.
5+ years of experience in embedded or automotive cybersecurity, BMS, or battery electronics.
Practical experience in TARA, cybersecurity architecture, and authoring technical security requirements.
Demonstrated experience with secure embedded design (Secure Boot, cryptographic implementation).
Strong communication skills with the ability to navigate cross-functional engineering teams.

Nice To Haves

Master’s degree in a relevant technical field.
Direct experience with ISO/SAE 21434, NERC CIP, or NIST SP 800-82 frameworks.
Familiarity with functional safety (ISO 26262) and the co-engineering of safety and security.
Experience with secure OTA update mechanisms and vulnerability response in a utility-scale environment.
Knowledge of communication protocols such as Modbus TCP, Ethernet, and CAN-FD.

Responsibilities

Lead cybersecurity architecture and TARA (Threat Analysis and Risk Assessment) for battery monitoring electronics.
Focus on mitigating risks related to sensor spoofing, unauthorized SOC manipulation, malicious commands, and firmware compromise.
Define and maintain testable cybersecurity requirements for BMS and monitoring functions, ensuring traceability from concept to release.
Develop and implement Hardware Root of Trust, secure boot, code signing, and key lifecycle management strategies.
Secure internal and external communication pathways, including CAN, CAN-FD, SPI, Ethernet, and Modbus TCP.
Define and validate secure OTA (Over-the-Air) and field update strategies, focusing on authentication, anti-rollback protection, and recovery behavior.
Identify and implement embedded intrusion/anomaly detection approaches for real-time attack awareness.
Support vulnerability analysis, penetration testing, and fuzz testing for battery monitoring and connected interfaces.
Lead issue remediation planning and establish response processes for product vulnerabilities and field issues.
Develop technical security case materials and evidence for design gates, audits, and compliance reviews.
Collaborate with software, controls, and safety teams to ensure security controls are compatible with functional safety and safe-state behavior.
Align with Ford Auto Engineering and global suppliers on shared architecture and implementation standards.
Communicate technical security risks, tradeoffs, and recommendations to executive-level stakeholders.