Vehicle Cyber Security Systems Engineer

Ford•Dearborn, MI

7h•Hybrid

About The Position

Perform product Cyber Security assessments on projects of multiple Ford product lines Compliance reviews on features, modules as defined in the Ford Cyber Security engineering process in compliance with ISO 21434, UNECE R155, UNECE WP.29 and any other required relevant global cyber security requirements, regulations. Using that understanding to standardize all business operations and establish clear, documented protocols. Have the ability to review technical documentation to assess compliance. Manage and apply cybersecurity requirements into product design and development life cycle from requirement to testing with required deliverables Work with feature and ECU owners to manage the progression of each feature / ECU through development to ensure security by design from inception Ensure features, components, systems are designed using robust engineering processes including threat analysis, risk assessment, adoption of security requirements, security audits, and vehicle ecosystem assessments Develop and utilize global supplier expertise to meet cyber security expectations Proficient in JIRA. Process, requirement improvement support, for future reference, particularly in the event of an audit by a regulatory agency. Provide presentations to management (program milestones, security governance board, etc.) Established and active employee resource groups

Requirements

Bachelor's degree in Electrical Engineering, Computer Engineering, Software Engineering, Computer Science, or Cybersecurity OR a combination of education and experience
5+ years of experience with embedded and/or automotive systems
3+ years of experience with in-vehicle network architecture, modules, and protocols (CAN, etc.)
Ability to develop and maintain engineering documentation including requirements, specifications, test plans, etc.
Ability to work independently and collaboratively
Strong communication and analytical skills
Experience with Hardware Security Module (HSM) and Secure Hardware Extension (SHE)
Experience with coding (i.e., C, C++, C# Python, Java, CAPL, JQL)
Experience with JIRA and Kanban boards for project management
Familiar with vehicle system (i.e., capabilities of ECUs on a vehicle)
Familiar with automotive standards (i.e., ISO 14229-1, ISO 21434)
Familiar with quality tools and methodologies (i.e., FMEA, DVP)
Able to work following an agile methodology
Knowledge of Ford's internal engineering systems and requirements
Comfortable working in a fast-paced and innovative environment where problems are not always well-defined.
Experience advocating and driving adoption of industry standard methodologies.
Project management skills, including identifying and scheduling process steps, determining resources and staff required to successfully complete research projects.

Responsibilities

Perform product Cyber Security assessments on projects of multiple Ford product lines
Compliance reviews on features, modules as defined in the Ford Cyber Security engineering process in compliance with ISO 21434, UNECE R155, UNECE WP.29 and any other required relevant global cyber security requirements, regulations.
Standardize all business operations and establish clear, documented protocols.
Review technical documentation to assess compliance.
Manage and apply cybersecurity requirements into product design and development life cycle from requirement to testing with required deliverables
Work with feature and ECU owners to manage the progression of each feature / ECU through development to ensure security by design from inception
Ensure features, components, systems are designed using robust engineering processes including threat analysis, risk assessment, adoption of security requirements, security audits, and vehicle ecosystem assessments
Develop and utilize global supplier expertise to meet cyber security expectations
Process, requirement improvement support, for future reference, particularly in the event of an audit by a regulatory agency.
Provide presentations to management (program milestones, security governance board, etc.)