Position: Senior Automotive Security Engineer
Company: Intellias
Category: Security
Experience required: 5y
English level: upper

Responsibilities:

- Help to design a secure connected vehicle architecture.
- Review security requirements and compliance documents from partners
- Participate in compliance discussions with internal teams and external partners to ensure our products meet security requirements for automotive compliance
- Help ensure products are implemented to a high security standard
- Conduct risk assessments to prioritize threats and compare mitigation strategies.
- Assist design teams in developing secure automotive systems.
- Collaborate with product and engineering on security during design/development/testing
- Analysis of communication between the head unit and control units Ethernet, CAN bus, radio channels etc.
- In-depth hardware and software-based tests on ECU, Interfaces, and Infrastructure
- Generate security requirements for our engineering and suppliers
- Participate in security operations support and incident response
- Develop and interpret security policies and procedures
- Develop and deliver general security awareness training
- Organization and to establish methods to detect and respond to those threats (or proactively prevent them from occurring).

Requirements:

- Bachelor's degree in Computer Science, or a related technical field, or equivalent practical experience
- Solid experience on Automotive Security
- Must have hardware and software experience with Electronic Control Units and Microcontrollers
- Deep understanding of Automotive connectivity and HW interfaces
Good knowledge of the different vehicle buses (CAN, FlexRay, LIN, Ethernet) and control unit communication
- Experience with security testing methodologies and tools
- Strong investigative and analytical problem-solving skills.
- Penetration testing experience.
- Proficient in software development, auditing code and features.
- Proven foundation in security technologies and OWASP 10, IATF 16949, ISO 9001, ISO 14001, ISO 45001, ISO21434
- Understand secure development lifecycles.
- Security expertise in one or more of: C, C++, x86, ARM, CAN, cryptography, exploit development.
- Knowledge of UNECE WP29 regulations