GTSC Engineering Cyber Advanced Engineer

Responsibilities are to

• Tailor and comply with the Valeo CyberSecurity product lifecycle process to achieve J3061, UNECE WP29 R155 and R156 and ISO/SAE 21434 compliance according to project and customer requirements.
• Support conversation, elicit Cybersecurity Requirements with customers and internal stakeholders, and assure consistent cyber security requirements understanding.
• Working with customers and internal stakeholders to develop ADAS product Cybersecurity system/architecture requirements.
• Support Valeo cybersecurity teams where applicable across supplier, R&D, Manufacturing and Customer OEMs to ensure Valeo needs and requirements are known, understood and communicated.
• Ensure all applicable cybersecurity methodologies, processes and guidelines are being followed correctly in the project and that product meets all cyber security requirements for the project from design to production, and until decommissioning.
• Ensure the solution is feasible, does not affect product core functions, testable and fits to customer requirements and in line with Valeo standard solutions.
• Create following project working packages following Valeo product CyberSecurity methodology:
• [System] CyberSecurity Risk Analysis (SeRA)
• [System] CyberSecurity Concept (SeCo)
• [System] CyberSecurity Tests Execution
• [System] CyberSecurity Incident Management
• [System] CyberSecurity Tests Plan and Preparation
• production cybersecurity requirements (interface with IT/IS teams)
• corrective tasks for post-production incident management
• Coordinate with the Functional CyberSecurity Manager from the project for all the other project CS working packages. Based on the complexity of the project you might be required to fill up the role as cybersecurity manager.
• Carry out technical security analysis as part of cybersecurity solution development.
• Work closely with Product Testing groups to ensure that the Cybersecurity mechanisms are testable in development, production and postproduction phases and support regular security audits.
• Participate to internal/external Cyber security reviews and Cyber security formal review with the Functional CyberSecurity Assessor (FSeA)
• Participate to monitoring project Cyber security requirements implementation / testing progress / reviews status
• Develop and understand the required Valeo product hardware and software component elements from suppliers and work closely with suppliers to understand cybersecurity technology roadmaps. i.e. embedded HW elements for Cybersecurity functions, HTAs, Knowledge of embedded SW elements as part of cybersecurity solutions.
• Participate on demand to automotive internal/external cyber security working groups for the definition of cybersecurity process standards.

Education/Training

Basic Qualifications

Bachelor's degree in Electrical Engineering/Systems Engineering/Computer Engineering/Computer Science.

Preferred Qualification

• Master's degree in Electrical Engineering/Systems Engineering/Computer Science.
• Currently active cybersecurity certification.
• Experience in Software Quality and process (e.g., ASPICE, CMMI, IATF16949).

Professional Experience

• Systems engineering, architecture or electronic product development experience (understanding of embedded architecture, development, design principles).
• Minimum 2+ year's industry experience.
• Aware of State of Art in Embedded Security with knowledge of Industry Standards, eg. Knowledge of SAE J3061, UNECE WP 29 R155 & R156, ISO/SAE AWI 21434.
• Knowledge in embedded cybersecurity
• specification of security controls
• system hardening
• secure coding, including the development of security mechanisms (e.g. firewall, boot sequence, OTA updating, access controls)
• Embedded product knowledge with knowledge of MCU & SoC based systems, ideally, Automotive embedded products.
• Experience in the design of embedded Cybersecurity mechanisms preferred.
• Knowledge of Automotive Vehicle Networks and general electronic automotive products is an advantage but Automotive experience is not mandatory.

Preferred Experience.

• System architecture, including security by design; privacy by design or functional safety by design are a plus.
• Network architecture
• Cloud solutions
• Wireless technologies, e.g. Wi-Fi, Bluetooth/BLE, mobile networks
• IoT cryptography
• Electronics
• Privacy engineering, including Privacy Impact Assessments; understanding of the national personal data protection law or European GDPR
• Product testing & validation

Other Specifications

• Excellent communication skills, both written and verbal, clarity, concision, able to adapt reporting to customer or management expectations.
• Confident, articulate, self motivated, determined, energetic
• Experience in the automotive industry will be an advantage, Automotive SPICE practical experience
• Agile and adaptable approach
• Enthusiasm for technical systems and processes to develop

Mobility

• International travels: on rare occasions, mainly Germany, Ireland, China, India, Egypt.

Job

R&D Engineer