Product Cybersecurity Engineer

Toyota Tsusho Systems•Plano, TX

22h

About The Position

The Product Cybersecurity Engineer supports the Product Cybersecurity Integrity team in confirming that Toyota Motor North America out-vehicle products and services meet CSMS expectations. This early-career role combines technical assessment, stakeholder coordination, project execution, and compliance process improvement. The engineer reviews cloud, web, mobile, API, and connected-service architectures and evidence; uses approved AI and automation tools responsibly; and communicates findings for senior review. Experienced PCI personnel retain responsibility for final compliance decisions and material interpretation issues while the engineer develops independent assessment capability through mentoring and defined review points. The role's approximate allocation is 50% out-vehicle technical assurance, 30% compliance data automation and AI, 15% project planning and execution, and 5% governance and standards support. In the first year, success includes independently triaging evidence for a defined assessment scope, identifying relevant architecture elements and missing evidence, managing reliable project plans and status tracking, drafting findings that need limited revision, automating a recurring compliance activity, using AI responsibly, and contributing to integrated traceability across products, requirements, evidence, assessments, audits, findings, and owners.

Requirements

Bachelor's degree in cybersecurity, computer science, computer engineering, electrical engineering, systems engineering, or a related technical field, or equivalent practical experience.
Foundational understanding of cybersecurity principles, secure development practices, risk assessment, and evidence-based compliance.
Ability to read and discuss system architecture, network, data-flow, and interface diagrams for cloud, web, mobile, API, or connected-service environments.
Strong project planning and management skills, including organizing work, building schedules, tracking dependencies, and communicating status and risks.
Demonstrated adoption of AI or automation tools to improve the quality or efficiency of technical, analytical, or project work.
Working knowledge of data analysis or automation using one or more tools such as Python, SQL, Power BI, Power Query, Power Automate, or APIs.
Clear written and verbal communication skills, sound judgment, attention to detail, and willingness to ask questions and escalate uncertainty.
Ability to collaborate with technical and nontechnical stakeholders across multiple functions and time zones.
Learning agility, technical reasoning, critical thinking, disciplined execution, and responsible use of AI and automation.

Nice To Haves

Internship, co-op, capstone, laboratory, or early-career experience involving cybersecurity, systems engineering, cloud or application security, technical compliance, data analysis, or workflow automation.
Familiarity with ISO/SAE 21434, UN R155, cybersecurity management systems, requirements traceability, audit evidence, findings, or corrective-action processes.
Exposure to cloud platforms, API security, identity and access management, web or mobile application security, connected services, or DevSecOps practices.
Experience translating technical information into concise assessment notes, project updates, dashboards, or management reports.
Experience working in a regulated, automotive, manufacturing, or global organization.

Responsibilities

Support CSMS gate assessments for out-vehicle products and services.
Review system architecture, data flows, interfaces, and change information to identify security-relevant components, dependencies, and missing information.
Draft assessment observations, questions, and findings for senior review; track responses and corrective actions to closure.
Coordinate with CSMS auditors so technical assessments complement compliance audits without duplicating audit activities.
Apply ISO/SAE 21434 and UN R155 concepts to out-vehicle assessments while developing subject matter expertise through mentoring.
Build and maintain project plans that define scope, activities, owners, milestones, dependencies, deliverables, and completion dates.
Coordinate assessment schedules with product teams, auditors, and other stakeholders.
Track progress, decisions, risks, issues, and actions; escalate concerns early with their impact and recommended next steps.
Prepare concise status updates and maintain accurate records for program-level reporting.
Manage multiple assignments, priorities, deadlines, and follow-through.
Use approved AI tools for research, document analysis, evidence triage, drafting, and recurring compliance work, validating outputs before use.
Identify repeatable tasks to simplify or automate and develop practical solutions using tools such as Python, SQL, APIs, Power BI, Power Query, or Power Automate.
Develop automated data-quality checks and reporting to identify missing, inconsistent, or overdue information.
Handle confidential and proprietary information according to applicable data-protection and AI-use requirements.
Maintain assigned portions of standards, policy, procedure, control, and evidence mappings.
Support updates to assessment procedures, templates, guidance, and training materials based on lessons learned.
Research relevant cybersecurity practices and emerging issues and summarize potential impacts for senior review.
Contribute to an integrated traceability model connecting out-vehicle products and systems with requirements, evidence, assessments, audits, findings, and owners.