Cybersecurity Engineer

Volvo•Mahwah, NJ

24d•Onsite

About The Position

Volvo Cars is seeking a Cybersecurity Engineer to join its Information Security Team, which supports a safe and secure digital experience for employees, customers, and retailers in the U.S. and Canada. Based onsite in Mahwah, New Jersey, the role focuses on implementing and maintaining cybersecurity measures across digital products and platforms so that security and privacy are considered by design. The position offers autonomy in a fast-paced environment, collaboration with a diverse team, and opportunities to work with current technologies and develop improvements to business practices. The Cybersecurity Engineer reports to the Head of Information Security. The role partners with U.S., Canadian, and global teams to secure consumer-facing products and services, assess risks, guide product roadmaps, and ensure compliance with information security architecture and applicable regulatory and legal obligations. It also supports incident resolution and promotes secure development practices through training and awareness.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
At least 5 years of proven experience in cybersecurity engineering.
A relevant certification is required, such as CISSP, CSSLP, SSCP, or GWEB.
Solid understanding of information security methodology, standards, software methods, procedures, and software programming languages.
Hands-on experience with secure software development lifecycle tools, such as Qualys, SonarQube, Detectify, and GitHub Advanced Security.
Ability to assess information security holistically, including threat modeling, risk, and vulnerability assessments.
Effective communication, presentation, and organizational skills.
Ability to establish and maintain good relationships with internal and external partners and stakeholders.
Ability to work efficiently with minimal supervision and identify and resolve problems in a timely manner.
Strong personal integrity and ability to maintain confidentiality regarding sensitive organizational matters, including compliance and ethics programs.

Responsibilities

Implement and maintain cybersecurity measures to ensure security and privacy-by-design requirements are met across digital products and platforms.
Collaborate with U.S., Canadian, and global partners, including Information Security, Enterprise Architects, Software Engineers, and Project Managers, on consumer-facing products and services.
Ensure compliance with U.S., Canada, and global Information Security architecture, processes, tools, technology, and organizational components, aligning compliance criteria with industry standards.
Translate security and privacy requirements into product development roadmaps and advocate standards and methodologies.
Perform technical security assessments, including static and dynamic testing, code reviews, and penetration testing of applications, websites, cloud infrastructure, and applicable hardware, software, and services.
Identify cybersecurity risks, conduct threat analysis, and recommend mitigation strategies to reduce potential attack vectors to acceptable levels before products launch into production.
Enforce information security and data privacy requirements related to regulatory and legal obligations, including GDPR, CPRA, SOX, and PCI compliance.
Resolve and complete assigned cases and incidents on time, and act as an escalation point for departmental support issues.
Maintain knowledge of recent cybersecurity vulnerabilities, attack methods, and prevention and remediation techniques.
Promote a culture of cybersecurity by leading secure development training and awareness sessions.