Cybersecurity Engineer

Volvo Car Corporation•Mahwah, NJ

26d•$118,495 - $154,044•Onsite

About The Position

Volvo Cars is seeking a Cybersecurity Engineer to join its Information Security Team in Mahwah, New Jersey. The team supports a safe and secure digital experience for employees, customers, and retailers in the U.S. and Canada. Reporting to the Head of Information Security, this role implements and maintains cybersecurity measures across digital products and platforms, with a focus on security and privacy by design. The position offers work in a fast-paced, diverse environment with autonomy and access to current technologies.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
At least 5 years of proven experience in cybersecurity engineering.
A relevant certification is required, such as CISSP, CSSLP, SSCP, or GWEB.
Solid understanding of information security methodology, standards, software methods, procedures, and software programming languages.
Hands-on experience with tools supporting the secure software development lifecycle, such as Qualys, SonarQube, Detectify, and GitHub Advanced Security.
Ability to assess information security holistically, including threat modeling, risk, and vulnerability assessments.
Effective communication, presentation, and organizational skills.
Ability to establish and maintain good relationships with internal and external partners and stakeholders.
Ability to work efficiently with minimal supervision and identify and resolve problems in a timely manner.
Strong personal integrity and ability to maintain the confidentiality of sensitive organizational matters relating to compliance and ethics programs.

Responsibilities

Implement and maintain cybersecurity measures and security- and privacy-by-design requirements across digital products and platforms.
Collaborate with U.S., Canada, and global partners—including Information Security, Enterprise Architects, Software Engineers, and Project Managers—on consumer-facing products and services.
Ensure compliance with U.S., Canada, and global Information Security architecture, processes, tools, technology, and organizational components, aligning compliance criteria with industry standards.
Translate security and privacy requirements into product development roadmaps and advocate for standards and methodologies.
Perform technical security assessments using static and dynamic testing tools, code reviews, and penetration testing across applications, websites, cloud infrastructure, and applicable hardware, software, and services.
Identify cybersecurity risks, conduct threat analysis, and recommend mitigation strategies to reduce attack vectors before production launch.
Enforce information security and data privacy requirements related to regulatory and legal obligations, including GDPR, CPRA, SOX, and PCI compliance.
Resolve and complete assigned cases and incidents on time, and serve as an escalation point for departmental support issues.
Maintain knowledge of recent cybersecurity vulnerabilities, attack methods, and prevention and remediation techniques.
Promote a culture of cybersecurity by leading secure development training and awareness sessions.