Product Cybersecurity Engineer

Toyota Tsusho Systems•Plano, TX

About The Position

The Product Cybersecurity Engineer supports the Product Cybersecurity Integrity team in confirming that Toyota Motor North America out-vehicle products and services meet CSMS expectations. This early-career role combines technical reviews, cross-functional coordination, and disciplined project execution. The engineer evaluates cloud, web, mobile, API, and connected-service architectures; uses approved AI and automation tools to improve efficiency and consistency; and communicates findings for senior review. Experienced PCI personnel retain responsibility for final compliance decisions and material interpretation issues while the engineer builds independent assessment capability through mentoring. The role's approximate allocation is 50% out-vehicle technical assurance, 30% compliance data automation and AI, 15% project planning and execution, and 5% governance and standards support. First-year success includes independently triaging evidence and completing readiness checks for a defined assessment scope with mentoring, identifying relevant interfaces and missing evidence, reliably managing project plans, drafting findings requiring limited revision, automating a recurring activity, using AI responsibly, and contributing to an integrated traceability model.

Requirements

Bachelor's degree in cybersecurity, computer science, computer engineering, electrical engineering, systems engineering, or a related technical field, or equivalent practical experience.
Foundational understanding of cybersecurity principles, secure development practices, risk assessment, and evidence-based compliance.
Ability to read and discuss system architecture, network, data flow, and interface diagrams for cloud, web, mobile, API, or connected-service environments.
Strong project planning and management skills, including organizing work, building schedules, tracking dependencies, and communicating status and risks.
Demonstrated adoption of AI or automation tools to improve the quality or efficiency of technical, analytical, or project work.
Working knowledge of data analysis or automation using one or more of Python, SQL, Power BI, Power Query, Power Automate, or APIs.
Clear written and verbal communication skills, sound judgment, attention to detail, and willingness to ask questions and escalate uncertainty.
Ability to collaborate with technical and nontechnical stakeholders across multiple functions and time zones.
Learning agility, technical reasoning, critical thinking, disciplined execution, and responsible use of AI and automation.

Nice To Haves

Internship, co-op, capstone, laboratory, or early-career experience involving cybersecurity, systems engineering, cloud or application security, technical compliance, data analysis, or workflow automation.
Familiarity with ISO/SAE 21434, UN R155, cybersecurity management systems, requirements traceability, audit evidence, findings, or corrective action processes.
Exposure to cloud platforms, API security, identity and access management, web or mobile application security, connected services, or DevSecOps practices.
Experience translating technical information into concise assessment notes, project updates, dashboards, or management reports.
Experience working in a regulated, automotive, manufacturing, or global organization.

Responsibilities

Support CSMS gate assessments for out-vehicle products and services.
Review system architecture, data flow, interfaces, and change information to identify security-relevant components, dependencies, and missing information.
Draft assessment observations, questions, and findings for senior review; track responses and corrective actions through closure.
Coordinate with CSMS auditors so technical assessments supplement compliance audits without duplicating audit activities.
Apply ISO/SAE 21434 and UN R155 concepts to out-vehicle assessment work while developing subject matter expertise through structured mentoring.
Build and maintain project plans defining scope, activities, owners, milestones, dependencies, deliverables, and completion dates.
Coordinate assessment schedules with product teams, auditors, and other stakeholders.
Track progress, decisions, risks, issues, and actions; escalate concerns early with clear impact and recommended next steps.
Prepare concise status updates and maintain accurate records for program-level reporting.
Manage multiple assignments while attending to priorities, deadlines, and follow-through.
Use approved AI tools for research, document analysis, evidence triage, drafting, and recurring compliance work, validating outputs before use.
Identify repeatable tasks for simplification or automation and develop practical solutions using Python, SQL, APIs, Power BI, Power Query, Power Automate, or comparable tools.
Develop automated data-quality checks and reporting to identify missing, inconsistent, or overdue information.
Handle confidential and proprietary information according to applicable data protection and AI-use requirements.
Maintain assigned portions of standards, policy, procedure, control, and evidence mappings.
Support updates to assessment procedures, templates, guidance, and training materials based on lessons learned.
Research relevant cybersecurity practices and emerging issues and summarize potential impacts for senior review.
Contribute to an integrated traceability model linking out-vehicle products and systems with requirements, evidence, assessments, audits, findings, and owners.