Position: CyberSecurity Engineer (Developer)
Company: Luxoft
Experience required: 5y
Category: Security
English level: upper
Published: 2023-01-01T00:00:00+02:00

The project is about an online communication unit for a German premium car manufacturer.

Project Description:
DXC-Luxoft is an industry-leading software integrator and solution house for in multiple business verticals such as Finance, Automotive, and Digital Transformation. DXC-Luxoft is working with both automotive OEMs, Tier-1 and other suppliers. There are millions of cars on the road today with solutions designed by DXC-Luxoft.

The project is about an online communication unit for a German premium car manufacturer. The main goal of this project is to support the client/customer to develop such telematics unit that requires Cybersecurity feature development based on ISO/SAE 21434 and Automotive SPICE for Cybersecurity.

For the successful candidate we offer the opportunity to enhance and develop your career with the following benefits:
    Join a highly competent and motivated international team
    Apply your talent into creating the mobility solutions of the future
    Gain hands-on experience working with well-recognized customers
    Personal growth and promotion options
    Make an impact on the overall growth of DXC-Luxoft

Responsibilities:
• Create and maintain cybersecurity engineering work products such as TARA, Cybersecurity Concept and Cybersecurity Requirements
• Supports the Cybersecurity Manager in the maintenance of the Cybersecurity Plan and in the planning, monitoring and adjustment of the proposed Cybersecurity-related activities
• Support the software implementation/development (i.e., design, coding, integration and verification) of the planned security controls at the project level
• Support the independent cybersecurity verification and validation process activities
• Provide process improvement feedback regarding cybersecurity development processes and deliverables
• Contribute to establishing automotive cybersecurity processes, methods and tools

Mandatory Skills Description:
• Practical proven experience with ASPICE Software Development
• Practical proven with Automotive Cybersecurity standards (UN R155 & ISO/SAE:21434)
• Profound knowhow in secure SW development (design, coding and unit verification)
• Knowledge of automotive communication buses (such as CAN, Ethernet, inter-processor communication) and the relevant communication protocols (i.e., UDS, TLS, I2C, UART, etc.)
• General cryptographic, encryption and authentication knowledge (i.e., SHA, AES, RSA, PKI, etc.)
• Previous experience in implementation of typical automotive cybersecurity controls (such as secure boot, secure update, secure diagnostics, VKMS, E2E, etc.)
• Previous experience with Jira/Confluence (or other ALM systems)
• Good communication skills; ability to explain concepts to other engineers.
• Self-organized, dynamic, and motivated

Nice-to-Have Skills:
• Telematics development experience
• Relevant automotive cybersecurity certifications
• Hardware-based support of Cybersecurity (HSM/TPM/HTA, crypto acceleration, TRNG)
• Experience with standard security protocols in common connectivity such as WiFi, Bluetooth, or USB
• Experience with firewall or Intrusion detection and prevention system
• Experience developing technical processes, procedures, guidelines and templates