Sr. Cybersecurity Validation Engineer

Polaris•Novi, MI

8d•Hybrid

About The Position

Polaris Industries, Inc. seeks Engineer, Systems Electrical Sr - Cybersecurity in Novi, Michigan. This role involves working with control systems engineers to plan test script development and software validation schedules, managing multiple ECU validation schedules and projects simultaneously. The engineer will review and understand cybersecurity requirements and desired vehicle system functionality, design test cases, and develop test scripts for software validation. Responsibilities include setting up, executing, and analyzing software validation results, reporting findings to stakeholders, executing fuzz testing, triaging test results, and collaborating with the cybersecurity team to prioritize issues. The role also entails reviewing internal/external supplier test reports, working with suppliers to resolve identified issues, and supporting penetration testing from various technical standpoints. The engineer will produce ISO/SAE 21434 compliant work products and ensure cybersecurity validation meets requirements set by the Product Cybersecurity Chief Engineer, suppliers, or test labs. Additionally, the role involves developing software tools for cybersecurity test automation, participating in TARA and cybersecurity discussions, reviewing cybersecurity requirements, and supporting design reviews to enhance cybersecurity. Support for end-of-line testing and analysis of cybersecurity intelligence related to vulnerabilities, hacking tools, and methods is also expected, contributing to a vulnerability database. The engineer will manage existing cybersecurity testing tools, research new tools and methods, and contribute to refining cybersecurity validation strategies. Participation in and support of Auto-ISAC working groups is also a component of this role.

Requirements

Bachelor’s degree in Electrical Engineering, Computer Science, Software Engineering, Cybersecurity or a related field, plus 5 years of related experience.
Alternatively, a Master's degree in Electrical Engineering, Computer Science, Software Engineering, Cybersecurity or a related field, plus 2 years of related experience.
Validating cybersecurity controls including secure boot, secure reprogramming, security access, secure diagnostics, security gateway, IDS/IPS, code signing, authentication, and encryption.
Cybersecurity regulations and standards including UNR 155/156, CRA, or ISO/SAE 21434.
Cybersecurity principles and cybersecurity concepts.
Automotive/embedded system validation.
Fuzz testing or penetration testing.
Vehicle control systems including Transmission, Twin EDU Inverter, and connected features.
Authority to work permanently in the U.S.

Responsibilities

Work with control systems engineers to plan test script development and software validation schedules.
Manage multiple ECU validation schedules and projects simultaneously.
Review and understand cybersecurity requirements and the desired functionality of the vehicle system.
Design test cases and develop test scripts for software validation.
Setup, execute, and analyze the results of the software validation and report results to stakeholders.
Execute fuzz testing, triage the test results, and work with cybersecurity team to prioritize the identified issues.
Review internal/external supplier test reports and work with suppliers to fix the identified issues.
Support penetration testing from testing tools, benches, setup, software, calibration, technical standpoints.
Produce ISO/SAE 21434 compliant work products.
Ensure that cybersecurity validation is completed as required by Product Cybersecurity Chief Engineer, suppliers or test labs.
Develop additional software tools to support cybersecurity test automation.
Participate in TARA and cybersecurity discussions.
Review cybersecurity requirements and support design reviews to improve cybersecurity.
Support development of end of line testing for cybersecurity.
Support analysis of cybersecurity intelligence related to vulnerabilities, hacking tools and methods, and contribute to vulnerability database.
Manage existing cybersecurity testing tools, investigate new cybersecurity testing tools and methods, and support refinement of cybersecurity validation strategies.
Participate in and support Auto-ISAC working groups.