Cybersecurity Software Engineer

• We implement, integrate, and validate security foundations for our automotive electro-mechanical systems.
• We take ownership of HSM integration, Secure Boot, Secure Diagnostics, and Secure Programming within AUTOSAR Classic.
• We define and drive implementation patterns for secure software development.
• We develop reusable software IP.
• We ensure robust, scalable cybersecurity solutions across the software stack.
• We collaborate with cross-functional teams to integrate security features across the software stack.

Technologies:

• AUTOSAR
• Cryptography
• Embedded
• Firmware
• HSM
• Security
• SPICE, We specialise in electro-mechanical systems for the Automotive / EV industry and are seeking a Cyber Security Software Engineer for a contract role based in Surrey, initially scheduled for 6 months. This role focuses on automotive cybersecurity within AUTOSAR Classic, with an emphasis on secure implementation, integration, validation, and cross-functional collaboration.

• We require 5-10 years of automotive embedded software development experience, including at least 3 years of hands-on embedded cybersecurity experience.
• We require deep AUTOSAR Classic experience with a leading configuration tool, preferably Vector DaVinci or MICROSAR.
• We require proven hands-on integration experience with Infineon AURIX HSM, including HSM firmware, host-side driver, key slots, and secure services.
• We require practical implementation experience with Secure Boot on AURIX or a comparable platform, including chain of trust, measured boot, and secure key storage.
• We require strong C programming skills with MISRA-C:2012, embedded programming, linker and memory layout, MPU, and bootloader-to-application transitions.
• We require working knowledge of UDS (ISO 14229-1), including Security Access (0x27), Authentication (0x29), and secure flashing (0x34 / 0x36 / 0x37) with signature verification.
• We require solid knowledge of the AUTOSAR Crypto Stack (CSM / CryIf / Crypto Driver) and KeyM.
• We require a strong understanding of cryptography fundamentals, including AES, SHA-2/3, HMAC, RSA / ECC, ECDSA, and key derivation.
• We require familiarity with debug and trace tooling, as well as CAN tooling.
• We require working knowledge of ISO/SAE 21434 and Automotive SPICE (ASPICE).
• We require experience with configuration management and issue tracking.
• We require rigorous debugging discipline and a strong code review culture.