Lead Engineer - Software and Cyber Security

Position Overview

We are looking for an Automotive Cyber Security Testing Lead Engineer for Powertrain ECUs to lead cybersecurity engineering activities for safety-critical powertrain control systems, including ICE, Hybrid, and Electric Powertrain ECUs. The role is responsible for ensuring that powertrain functions are protected against cyber threats and comply with global automotive cybersecurity regulations throughout the product lifecycle.

Key Responsibilities

• Lead cybersecurity engineering activities for Powertrain ECUs such as Engine ECU, VCU, MCU, BMS, HCU, OCDC, etc.
• Serve as the cybersecurity technical owner for assigned powertrain programs.
• Define and review test requirements for cybersecurity controls, including fuzz testing and penetration testing.
• Define and review secure architectures covering secure boot, secure communication, OTA security, and key management.
• Perform and lead Threat Analysis and Risk Assessment (TARA) as per ISO/SAE 21434.
• Define cybersecurity goals, requirements, and mitigation strategies for powertrain systems.
• Guide implementation of cybersecurity controls such as secure boot, secure flashing, and secure communication.
• Ensure alignment between cybersecurity and Functional Safety (ISO 26262) requirements.
• Support compliance activities related to UNECE R155/R156 and AIS 189/190.
• Coordinate cybersecurity activities with system, software, hardware, and validation teams.
• Lead cybersecurity reviews with vehicle teams, suppliers, and internal stakeholders.
• Mentor cybersecurity engineers and review technical deliverables.
• Support vulnerability management, incident response, and post-SOP cybersecurity activities.

Powertrain-Specific Cybersecurity Scope

• Protection of torque, speed, propulsion, charging, and energy management functions.
• Secure diagnostics and calibration access (UDS).
• Secure production and service software updates.
• Protection against unauthorized software or calibration modifications.

Standards & Compliance

• ISO/SAE 21434 – Road Vehicles Cybersecurity Engineering
• UNECE R155 / AIS 189 – Cybersecurity Management System
• UNECE R156 / AIS 190 – Software Update Management System
• ISO 26262 – Functional Safety

Technical Skills

• Powertrain control systems and real-time embedded software.
• CAN, CAN-FD, Automotive Ethernet, UDS, and ECU communication interfaces.
• Cryptography fundamentals, PKI, and key management.
• Secure boot, HSM, secure diagnostics, and other cybersecurity controls.
• Vulnerability and incident management.
• OTA/FOTA security and backend integration.
• Threat modelling and vulnerability analysis.

Soft Skills & Leadership

• Strong technical leadership and ownership mindset.
• Effective communication with cross-functional teams.
• Risk-based decision-making in safety-critical environments.
• Mentoring and coaching engineers.