Senior, Product Cybersecurity Architect

Job description

Job responsibilities

• Define and evaluate the implementation of cybersecurity controls, including but not limited to, embedded operating system, encryption, access controls, network security, middleware, and secure coding practices.
• Specific hands-on knowledge with implementation of cybersecurity embedded operating systems, networking, and cryptographic controls (e.g. securing embedded Linux, QNX, Ethernet, cellular telematics).
• Conduct, with a cross-functional team, process activities to define requirements, find design deficiencies, detect implementation defects, verify the product’s cybersecurity posture, and otherwise secure Torc’s products.
• Collaborate with product development teams to embed security into their design and development lifecycle of products and other software development activities.
• Stay abreast of emerging cybersecurity threats and technologies and continuously update our software security approaches, strategies, and solutions accordingly.
• Liaise with external security vendors and partners, managing relationships, and ensuring the effective integration of third-party security solutions.
• Prepare and present evidence in the cybersecurity case to demonstrate readiness to launch new products or release new software versions from a cybersecurity perspective.
• Train internal stakeholders on security practices and act as a resource where expert cybersecurity assistance is needed.

Job requirements

• 5+ years of experience hands-on engineering with safety-critical, cyber-physical systems (automotive, aerospace, medical).
• Bachelor's or Master's degree in computer science, electrical engineering, or related technical field plus demonstrated competences and technical proficiencies typically acquired through 6+ years of experience.
• Strong understanding of cybersecurity principles and practices for embedded, automotive, and autonomous systems.
• Must have strong demonstrated working usage of embedded operating systems (Linux, QNX, AUTOSAR) and embedded networking.
• Proficiency in recognizing software/hardware weaknesses security vulnerabilities and documentation through Threat Modeling.