Cybersecurity Engineer

Our Electronics Tech Center in Brasov focuses on the innovation, development and testing of electronic applications in the Safety area (Active Seatbelts & Steering Wheels), coordinating endtoend projects for OEMs. We are now looking for a Cybersecurity Engineer to join our growing team. The Cybersecurity Engineer is in charge of deploying cybersecurity activities (ISOSAE 21434) and associated work products in context of applicable application for the automotive domain.

What Youll Do

Deploy Cybersecurity activities in accordance with the Vcycle development process and the product requirements (risk analysis) during the product development:

• Collect technical needs for targeted product

• Create and update Cybersecurity plan

• Support system team in Item definition

• Manage Threat Analysis and Risk Assessment (TARA) including CAL quotation (if applicable)

• Define andor assess Cybersecurity Goals

• Harmonize customer cybersecurity requirements and internal product requirements.

• Development of Functional Cybersecurity Concept and associated requirements

• Development of Technical Cybersecurity Concept and associated requirements

• Traceability of customer needs.

• Participate to system architecture definition for cybersecurity needs.

• Understand and focus on interrelationships between elements of system

• Support DFMECA (Function, Component and SW)

• Support FTA (qualitative and quantitative) and associated summary report

• Support Project Manager or Change Leader for all cybersecurity needs

• Create and maintain Cybersecurity case

• Participate to reviews from design activities

• Evaluate cybersecurity aspects of the design (system, HW and SW)

• Check cybersecurity requirements are implemented and verified according to requested CAL (if applicable)

Apply cybersecurity engineering methods by using engineering tools:

• For specifications, design and architecture (DOORS, Enterprise architect, Item toolkits, Excel)

• For issues: Technical Evolution Demand (or equivalent), management of configuration items.

• Overall fulfilment of the role with respect to industry standards such as ISO 21434 (according to the VCycle)

Take part in the evaluation of new method of development:

• Main component (IC): specification of technical characteristics of component

• Microcontroller: specification of technical characteristics of μC

• Development tools: Requirement management tools, architecture development tool, test tools

• Methods: formal specification, functional analysis, requirement verification

• Quality tools: respect of ASPICE, CMMI, ISO26262, Autoliv checklists

Support in Cybersecurity Development Followup for the Projects

• Evaluating the cybersecurity workload (PBS, WBS)

• Establishing a detailed progress cybersecurity task report with the referring product design leader serial life product engineering leader

• Supporting review of customer CIA and establishing supplier CIA

• Establishing development plan for Cybersecurity activities (Cybersecurity plan)

• Identifying corrective actions and directing them to the referring product engineering leader for design progress meetings.

• Collecting data for the cybersecurity indicators update.

• Supporting in definition of cybersecurity related tests.

Ensure the Consistency of Cybersecurity Workproducts Development

• Create and maintain documentation (according to Autoliv Cybersecurity process)

• Participating to internal and external reviews

• Supporting technical risk analysis

• Supporting supplier agreement contract

• Collecting data to provide indicators

• Integrating and releasing cybersecurity deliveries

• Bringing support to the system, software and hardware designers to handle issues

• Participating to traceability matrix creation

• Participating to system development audits

• Participating to Change Control Board

Deploy Cybersecurity activities in accordance with ISOSAE 21434 standard during postproduction phase, i.e. from SoP to Cybersecurity endofservice:

• Manage cybersecurity vulnerabilities, survey and collect potential cybersecurity vulnerabilities

• Monitor incident response

• Identify and deploy corrective actions when deemed required according to change management process

Provide support in RFQ phase and customer presentations:

• In term of feasibility, technical aspects for products and process

• For nextgeneration embedded Safety products, from the cybersecurity engineering point of view

Train people (design team, process manufacturing, industrialization department…)

Work with customers, both internal and external, as cybersecurity expert

Work with product development teams and sales team to ensure correct understanding and implementation of requirements

What Youll Bring

Background in cybersecurity engineering with relevant work experience in development of embedded realtime systems (Cybersecurity conception)

• ISO 21434 Automotive Cybersecurity

• System engineering

• Hardware and Software knowledge in embedded projects

• Development method for embedded system

• Development quality constraints (SFEA FMEA FTA)

• Encryption algorithm implementation and numerical computation

• DOORS