We are currently recruiting an experienced Product Cybersecurity Engineer to join our team supporting our client in the automotive industry.

RESPONSIBILITIES:

Design cybersecurity measures and define cybersecurity specifications for the organization’s Vehicle systems, ECU’s and Applications to reasonably protect road users from new cyber threats arising from fast-evolving vehicle functions and features
Monitor and check the compliance of cybersecurity controls implemented in the organization’s products during the entire product development lifecycle
Support suppliers to better understand and implement the organization’s cybersecurity requirements
Threat analysis including impact and feasibility to identify gaps in cybersecurity controls for vehicle systems, ECU’s and Applications
Capable of conceptualizing, defining, designing and implementing security systems and architectures
Elicit cybersecurity requirements to provide system requirements in order to satisfy customers aligned with regulations and corporate cybersecurity policy
Review the supplier design and implementation to ensure that security controls are reasonably planned for implementation according to the organization’s requirements
Understand and interact with key stakeholders to ensure the consistent application of policies and standards across all technology projects, systems and services
Provide clear risk-mitigating directives for Connected vehicles, systems, and applications
Respond to supplier inquiries about requirements and compliance to them
Performing assessments and analyzing threats and attacks
Work with DRE’s and Application owners to mitigate riskand submit change requests

REQUIRED SKILLS & QUALIFICATIONS:

Bachelors from EE, Math, Computer Science, Cybersecurity or other scientific degrees with 3 years of experience around software/firmware development and/or ECU development within the automotive industry
Minimum of 3 years of cybersecurity-related experience (e.g., security research, system exploitation, cybersecurity engineering)
Professional security certifications are desirable, such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Automotive Security Engineer (CASE), or other similar cybersecurity-related certifications
Deep understanding of Cybersecurity controls applicable to Embedded Systems and Electronic Control Units (ECU’s)
Threat and Risk Assessment awareness or experience (Risk = Impact X Feasibility) where Impacts are viewed from the view of the Road User on Safety, Operational, Financial and Privacy
Awareness/ability to understand vulnerabilities in SW and HW for how these affect the vehicle in Design phase and Post-Production Phase.
Good knowledge of X.509 digital certificate standard and Public Key Infrastructure (PKI) management
Good Knowledge of symmetric and asymmetric cryptographic algorithms (e.g., AES, RSA, ECC)and certificate-based identity
Good knowledge of common security patterns (e.g., authentication, authorization, separation of privileges, sandboxing, need to know, separation of duties)
Good knowledge of security protocols (e.g., TLS, SSH)
Good knowledge of software vulnerability assessment of ECU firmware and Android apps
Good knowledge of performing cybersecurity Threat and Risk Analysis (TARA)(e.g., STRIDE) for vehicle system (e.g.,CAN bus, ethernet, Electronic Control Units (ECU), and ECU firmware and applications)
Good knowledge of Connected Vehicle Cybersecurity
Good knowledge of certificate-based identity
Good Basic knowledge of automotive operating systems (e.g., AutoSAR Classic and Adaptive, QNX, Linux, Android) and middleware
Basic knowledge of Connected Application integrations (Legato App framework, Automotive Android, QNX)
Basic knowledge of programming in a high-level language (e.g., C/C++, Java, Python, Kotlin)
Basic Good knowledge of programming in a scripting language (e.g., jscript, bash)
Good knowledge of writing clear, well-formed cybersecurity requirements
Ability to work collaboratively communicate using online collaboration tools in multicultural teams
Good self-organization and analytical skills
Strong skills in technical writing and presenting
Strong verbal and written proficiency in English

PREFERRED SKILLS & QUALIFICATIONS:

Basic knowledge of security software scanning tools (e.g., Fortify by Opentext)
Basic knowledge of Connected Vehicle experience
Basic knowledge of vehicle application/firmware update operations over the air (OTA)
Good knowledge of ISO 21434: Road Vehicle -– Cybersecurity Engineering
Basic knowledge of ISO 15118-2–Vehicle-to-Grid Communication Interface (Plug-and-Charge onboard electric vehicle payment service)
Good knowledge of Service Oriented Architecture design pattern and paradigm
Basic knowledge of DOORS requirements tool, Jira issue tracking tool

NOTE:

Remote
Must be willing and able to travel to the USA, without restrictions, effective on the start date
Valid driver's license is required as well as a clean driving record

OTHER PERKS & BENEFITS

Paid Benefits after 90 days (individual and family) – extended medical, out-of-country coverage, dental etc.
Pension eligibility, with employer match, after 1 full year of work (open enrollment every October)

MEDA offers an excellent referral bonus. Great candidates know great candidates

MEDA Limited is an equal opportunity employer and does not discriminate in employment on the basis of any of the protected reasons as described in the Ontario Human Rights Code. We are committed to providing accommodations for persons with disabilities, as described in the Accessibility for Ontarians with Disabilities Act, 2005. Accommodation requests will be reviewed and granted to those that request assistance during our hiring process.

MECAN

Job Type: Full-time

Education:

Bachelor's Degree (preferred)

Experience:

cybersecurity: 3 years (preferred)

Work Location: In person

MEDA Limited

New Jobs

Product Cybersecurity Engineer [13616]