Lead Cyber Security Engineer

Kyyba•Troy, MI

5h•Onsite

About The Position

Who we are looking for The Lead Cybersecurity Software Engineer will lead the vehicle software execution team with software communication development plans and execution for the company. This position will be responsible for working cross functionally to ensure the software cybersecurity plans for the company have a high-quality execution.

Requirements

Bachelor’s degree in engineering Electrical and/or Computer engineering, Electronics Engineering, Information Science.
Minimum of 5 years’ experience in automotive embedded software development for ECUs, gateways, and in-vehicle networks.
Minimum of 3 years’ hands-on experience in automotive cybersecurity features, principles, and best practices, including implementation and process creation aligned with ISO/SAE 21434, SAE J3061, and vulnerability management standards
Minimum of 2 years’ experience in development, design, and testing of embedded cybersecurity work products, including secure ECU flashing, certificate-based unlock mechanisms, secure boot and hash algorithms, and software security mechanisms for gateway modules and ECUs with internal and external connectivity.

Nice To Haves

Bachelors or Master’s degree in Electrical Engineering, Computer Engineering, Electronics Engineering, or Information Science.
Solid understanding of automotive cybersecurity principles, including threat modeling (TARA), secure communication design, and implementing security requirements across ECUs, gateways, and connected vehicle interfaces.
Hands-on knowledge of embedded automotive security concepts and technologies, including secure ECU access, secure diagnostics, certificate-based unlock, secure flashing, and secure boot.
Experience with software work products developed in compliance with ISO-21424 and ASPICE standards.
Strong knowledge of automotive communication protocols such as CAN, UDS, and automotive Ethernet, with experience applying security mechanisms within vehicle networks.
Performed vulnerability analyses and TARAs (Threat Analysis and Risk Assessment); knowledge of mitigation techniques for embedded devices; previous penetration testing experience is desirable.
Proficient in requirements, change, and configuration management tools such as IBM DOORS NG, Polarion, JIRA, Bitbucket, and IBM RTC.

Responsibilities

Develop Communications requirements and manage the development, sourcing, and engineering of these solutions.
Lead the definition of vehicle-level cybersecurity requirements and architecture, addressing in-vehicle networks, ECU communication, secure unlock, diagnostics, OTA, and external connectivity interfaces.
Lead the definition, review, and deployment of vehicle cybersecurity requirements and standard-compliant engineering work products, including Threat Analysis and Risk Assessment (TARA), in accordance with ISO/SAE 21434, SAE J3061, and NIST SP 800-53.
Interface across vehicle systems, hardware, and software, manufacturing, and production teams to ensure consistent and compliant implementation of vehicle cybersecurity requirements throughout the product lifecycle.
Define and lead cybersecurity requirements and validation strategies for embedded ECU authentication mechanisms, considering vehicle-specific attack vectors, threat scenarios, and misuse cases.
Lead hardware–software security interface definition, validation strategies, and execution to ensure automotive cybersecurity compliance across ECUs, vehicle gateways, and external connectivity interfaces, addressing identified threats, risks, and feature security requirements.
Analyze tools for results of secure code analyzers, static code analyzers, and other tools to make sure threat and vulnerability information for future architectures are assessed.
Conduct threat analysis, vulnerability assessments, and risk assessments with software vendors, ECU suppliers/manufacturers and 3rd party engineering services.
Support RFI/RFQ activities.
Develop, configure, integrate, and validate hands-on vehicle cybersecurity solutions, including certificate-based ECU unlocking, secure diagnostics access, and secure flashing/firmware update processes.