Cyber Security Penetration Test Engineer

• We are responsible for developing the cyber security penetration test lab.
• We create and review penetration test scopes, penetration test plans, and penetration test reports.
• We execute penetration tests and support the creation of vulnerabilities and related CSMS artefacts.
• We support Product Engineering teams to understand and deliver penetration test-related activities.
• We manage the delivery of penetration test activities as per CSMS (ISO 21434) according to scope, time, budget, and quality.
• We build and review vulnerability reports.
• We create penetration test scopes and plans for ECUs, systems, and vehicles.
• We review penetration test reports for ECUs, systems, and vehicles.
• We assess cyber security penetration test scopes and plans for customer products and run penetration tests as per the approved scope for ECUs, systems, and vehicles.
• We manage and lead external penetration test suppliers and their activities.
• We maintain and develop penetration test scripts and tools for penetration testing and fuzz testing.
• We support external penetration test activities for ECUs, systems, and vehicles.
• We support vulnerability resolution and VSOC by demonstrating vulnerabilities, attacks, and PoCs.
• We support the sign-off of penetration test-related artefacts and type approval activities.

Technologies:

• Embedded
• Hardware
• Support
• Python
• Security

• We require knowledge of at least one scripting language, including Python, CAPL, and others.
• We require knowledge of TARA, security concepts, and other cyber security artefacts mentioned in ISO 21434.
• We require knowledge of cyber security technologies used to protect embedded systems.
• We require knowledge of at least two automotive technologies, such as in-vehicle networks, safety-critical embedded software and hardware, low-level debug interfaces for embedded hardware, complex onboard computers, and vehicle connectivity.
• We require understanding of high-integrity systems and secure software and/or hardware design principles in an embedded environment.
• We require the ability to engineer in a way that is demonstrably compliant with standards and technical specifications.
• We require excellent collaborative skills.

We are Tata Technologies, and we design, engineer, and validate products for the worlds leading manufacturers. Our Engineering Research and Development department is a fast-growing global function working across Automotive, Aerospace, and Industrial Heavy Machinery. This role is based at our customers office in Gaydon, and you will be part of Product Engineering teams delivering secure products while helping improve our cyber security posture and respond to emerging threats. We offer a competitive salary and excellent benefits, including a pension scheme with employee contributions matched up to 5%, 25 days holiday, private health care, the Tata Jaguar Land Rover privilege scheme with up to 20% off new JLR vehicles, group income protection, Health Assured Employee Assistance Program, group life assurance, and a Health Shield private health cash plan. We are committed to innovation and to engineering a better world.