Automotive Security Engineer

We are looking for a highly skilled Automotive Cybersecurity Developer with hands-on experience implementing security mechanisms in ECU software and a strong understanding of automotive cybersecurity standards and practices.

Education & Experience

• Bachelor's or masters degree in Electronics Engineering, Embedded Systems, or Cybersecurity • 4 8+ years of experience in embedded software development, automotive ECU security, cryptographic systems, and automotive communication protocols. • Prior exposure to automotive ECU development, secure boot, security-critical systems is essential.

Technical Requirements

• Expert C / C++ for embedded systems; bare-metal firmware, bootloaders, ECU software stacks • Secure coding practices - MISRA-C, ASPICE • Hands on experience with RTOS or equivalent, AUTOSAR Crypto Stack. • Automotive embedded platforms - ARM, TriCore, TI (Aurix, Sitara) or similar; Working on TI AM26x SDK and drivers hands-on is an added advantage • Cybersecurity architecture for automotive ECUs - Root of Trust, Secure Boot, Secure Update, HSM stack integration, Key Management, KMS, PKI, Digital signing of software/firmware, lifecycle management. • Strong understanding of cryptographic algorithms - AES, RSA, ECC, SHA, PKI, CMAC, HMAC, HKDF, KDF • Communication protocols - CAN, UDS, XCP, J1939, UART, SPI, I2C • Standards -ISO/SAE 21434, UNECE R155 / R156, ISO26262, AUTOSAR. • Proven experience in: o Secure boot architecture and implementation o Secure flashing / secure firmware update mechanisms based on UDS standard o UDS security (ISO 14229 - UDS $27/$29) authentication and access control o Hardware Security Modules (HSM) and secure element integration o Treat modeling (TARA) and risk-based security design approaches. o Cybersecurity test planning, security validation techniques, vulnerability assessment, penetration / fuzz testing. o Experience working in AUTOSAR, ISO26262, ISO/SAE 21434 compliant engineering environments. o Working on Vector AUTOSAR stack.

Tools

• Testing: CANoe, CANalyzer, CANape or equivalent • IDE/Compiler: TI Code Composer Studio, Eclipse, GCC-ARM • Static Analysis: Polyspace, Coverity, Blackduck • Requirements: IBM Jazz, DOORS (DNG), Jira • Version Control: Git, Sharepoint

Key Competencies

• Strong analytical thinking and problem-solving. • Ability to design and implement secure embedded solutions from requirements. • Good understanding of system-level security trade-offs and constraints. • Strong debugging skills for hardware / software integration issues. • Effective communication skills for cross-functional collaboration.