Security Engineer (Purple Team)

Job description

Job responsibilities

• Review, assess, and audit vehicle software platform code to identify security vulnerabilities using automated tests and tooling.
• Lead security verification and validation (V&V) initiatives and serve as the point of contact for all security V&V activities.
• Set up benches for penetration tests and risk assessments in an automotive environment.
• Take a hands-on approach to security by implementing fixes for identified vulnerabilities where appropriate, while coordinating with core software teams to drive long-term remediation of high-impact issues.
• Help in designing a secure vehicle software platform, connected vehicle architecture, and connected autonomous vehicles architecture.
• Conduct hands-on security testing and perform risk assessments to prioritize security bugs and threats.
• Compare mitigation strategies and prioritize mitigation efforts based on the risk.
• Work with Applied's different business units to develop secure automotive products (Vehicle OS, SDS) in line with ISO 21434 process requirements and UN R155 technical specifications.

Job requirements

• 2+ years of industry experience in software engineering or product security engineering.
• Bachelor's degree in Cybersecurity, Information Technology, Computer, Software Engineering, or equivalent
• A good understanding of embedded systems and how software interacts with hardware.
• Strong experience in penetration testing or hands-on security assessment of embedded systems.
• Good technical knowledge of Linux or QNX internals .
• Security expertise in one or more of the following: C, C++, x86, ARM, cryptography, or exploit development.
• Experience with network security(firewall configurations, ssh authentication).
• Proficiency in programming with C/C++ or Python .