Embedded Cyber Security Engineer

• Perform Threat Analysis and Risk Assessments (TARA) and other security analysis activities to identify, assess and mitigate cyber security risks
• Plan, initiate and track cyber security engineering activities, resources, deliverables and lifecycle milestones
• Develop and manage cyber security activities across system, hardware and embedded software engineering disciplines
• Derive cyber security requirements from risk assessments and allocate them across system, hardware and software boundaries
• Review and influence system, hardware and software architectures, including secure communication flows, trust boundaries and attack surfaces
• Coordinate with customers, suppliers, penetration testers, external assessors and certification authorities
• Review Cybersecurity Requirements Specifications, security concepts and architecture documents to identify potential vulnerabilities across design, integration, testing, production and over-the-air updates
• Support vulnerability assessments using methods such as Attack Tree Analysis, STRIDE, DREAD, vulnerability scanning, penetration testing coordination and fuzz testing

• Significant hands-on experience in cyber security engineering within the automotive, marine, industrial, machinery, aviation, aerospace or related sectors
• Engineering experience with the ability to read and understand hardware and software technical datasheets, specifications and embedded system architectures
• Strong understanding of embedded systems, E/E hardware, embedded software and system engineering principles
• Ability to assess cyber security risks at architectural level and develop practical mitigation strategies
• Understanding of relevant standards and regulations, such as ISO/SAE 21434, UNECE WP.29 R155 and R156, IEC 62443, ISO/IEC 27001, DO-326A and ED-202A
• Understanding of Model-Based Systems Engineering (MBSE) and SysML for describing system architectures, secure communication flows, trust boundaries and state changes
• Ability to derive, manage and trace cyber security requirements while balancing technical trade-offs and system constraints
• Confident communication, negotiation and stakeholder management skills, with the ability to influence internal and external design decisions

Desirable Attributes:

• A practical, solution-focused mindset and the confidence to investigate technical issues independently
• Willingness to learn and apply new cyber security standards, regulations, methods and tools
• Experience working with Tier 1 or Tier 2 suppliers, secure connected systems or embedded product development
• Ability to work collaboratively with engineering, software, hardware, supplier and customer teams

• Permanent opportunity within the marine and automotive technology sectors
• Involvement in complex embedded systems and secure connected product development
• Opportunity to work across the full engineering and cyber security lifecycle
• Exposure to customers, assessors, certification authorities and multidisciplinary engineering teams
• Support for continued professional learning and development