Cybersecurity Engineer

Job Purpose

The cybersecurity engineer works within light vehicle electrification business unit and in collaboration with the system engineering leads to contribute to the development of a secure and robust solution covering both hardware and software which may include hardware trust anchor, secure on-board communication, secure bootloader, secure update, and other security controls.

Job Duties and Responsibilities

• Configure, integrate and test AUTOSAR based ECU cybersecurity software stack
• Integrate HSM based secure core of ECU with the host core
• Configure HSM to provide authenticated boot and authenticated firmware update
• Support cybersecurity activities, such as hardening ECU HW & SW against cyber-attack, as assigned per project in relation to meeting stakeholder requirements
• Support cybersecurity requirements analysis with customers and prepare cybersecurity case to ensure product will meet cybersecurity goals
• Support the decomposition of cybersecurity requirements from stakeholder requirements and work closely with hardware, software, and functional safety team members or vendors to ensure secure technical solution can be achieved; plan and present mitigation activities as required
• Support cybersecurity risk assessments and threat modeling as related to the specified product
• Support projects during quoting process by analyzing cybersecurity requirements, providing effort estimates, and cross-referencing to the product offerings
• In collaboration with global Dana cybersecurity team, follow ASPICE cybersecurity process, methods and tools development within light vehicle business unit as needed
• Assist in cybersecurity training and awareness within the business unit as needed

Qualifications

• 4+ years of experience in embedded software development (C, C++, AUTOSAR)
• Experience in embedded cybersecurity (automotive preferred)
• Expert knowledge of cryptography
• Knowledge of industry standards related to cybersecurity (UNECE WP.29, ISO/SAE 21434, etc.)
• Excellent communication and analytical skill
• Excellent organizational skills as demonstrated through executed production programs
• Experience with Jira, Polarion, Azure or similar tools
• Ability to work independently as required and take ownership of project deliverables
• Knowledge of ASPICE and ISO26262

Education

Bachelor's degree in Engineering, Computer Science, or related discipline. Certifications in cybersecurity is a plus.