Cybersecurity Engineer F/M/X

Job Description

As a Cybersecurity Engineer, you will be responsible for defining, implementing and following up cybersecurity activities for embedded control units and related vehicle functions. Your scope will cover risk analysis, requirements engineering, security concepts and compliance with automotive cybersecurity standards and regulations.

Job Description

As a Cybersecurity Engineer, you will be responsible for defining, implementing and following up cybersecurity activities for embedded control units and related vehicle functions. Your scope will cover risk analysis, requirements engineering, security concepts and compliance with automotive cybersecurity standards and regulations.

Your main responsibilities will include:

• Conduct and maintain cybersecurity risk analyses for embedded transmission and powertrain systems, using structured methods (e.g. TARA, threat modeling).
• Identify and classify system assets, potential attack vectors, vulnerabilities and associated risks, and propose appropriate mitigation strategies.
• Define cybersecurity objectives and contribute to system‑level and ECU‑level security concepts for electrified driveline components.
• Translate risk analysis results into clear, testable cybersecurity requirements for system, hardware, software and suppliers.
• Ensure proper allocation, traceability and coverage of cybersecurity requirements across the V‑cycle (concept, design, implementation, integration, validation).
• Review system and embedded software architectures to assess security posture and recommend design improvements (segmentation, secure communication, hardening, etc.).
• Specify security mechanisms for in‑vehicle communication, diagnostics, authentication, access control, secure update and data protection.
• Prepare, maintain and review cybersecurity work products at project level (risk analysis reports, security concepts, requirement specifications, compliance evidence).
• Monitor implementation of cybersecurity measures, follow up on open actions, deviations and residual risks, and support risk acceptance decisions.
• Support verification, validation and testing activities related to cybersecurity (test specifications, test reviews, evidence consolidation).
• Review technical documentation and supplier deliverables to ensure alignment with cybersecurity requirements and standards.
• Contribute to the definition and continuous improvement of cybersecurity processes, methods, templates and internal guidelines.
• Collaborate closely with Functional Safety, Systems Engineering and other stakeholders to align safety and security activities and avoid conflicts.
• Communicate cybersecurity topics, risks, trade‑offs and decisions to project managers and technical leaders in a clear and structured way.

Your Profile

• Master’s degree in Computer Science, Information Systems, Electrical Engineering, Mechatronics, Embedded Systems or a related discipline.
• Professional experience in automotive cybersecurity, embedded systems security or product security engineering.
• Hands‑on experience with threat and risk analysis methods (e.g. TARA), security concept definition and security requirements engineering.
• Solid understanding of ISO/SAE 21434 and its application in development projects.
• Familiarity with UNECE Regulation R155 and automotive Cybersecurity Management Systems (CSMS).
• Good knowledge of embedded hardware and software architectures (microcontrollers, ECUs, communication buses, RTOS, etc.).
• Experience in managing cybersecurity requirements, traceability and technical documentation throughout the development lifecycle.
• Ability to translate abstract security risks into concrete, implementable technical requirements for engineering teams.
• Experience working in multidisciplinary, international project environments.
• Strong written and spoken English; additional languages are a plus.
• Strong communication skills, analytical mindset and a structured approach to technical problem‑solving.

Preferred Experience & Skills

• Experience in automotive powertrain, transmission or electric‑vehicle systems.
• Knowledge of standards and frameworks such as ISO 24089 (software update engineering), IEC 62443, OWASP or AUTOSAR (Classic/Adaptive).
• Practical experience with secure boot, secure diagnostics, cryptographic mechanisms, key management or intrusion detection for embedded systems.
• Exposure to cybersecurity testing, vulnerability management or penetration testing in an automotive or embedded context.
• Understandi