Job
Description
System Architect (Cybersecurity) The Cybersecurity System Architect isresponsible for the security concept definition, the execution of cybersecurityanalysis, the analysis of key cybersecurity technologies and trends, the customerand supplier facing activities. As part of theOffer Team he/she contributes to the early definition of the product and theCybersecurity Concept during the Offer Phase in order to make proper evaluationof the cybersecurity impacts on the HW and SW perimeter and related developmenteffort and costs. As part of the Systemand HW Platform/System Team he/she supports the design of the cybersecurityconcept, including requirements and architecture modeling for HW and SWcomponents, and architecture analysis. Mainactivities/responsibilities Responsible to create securedesign for Android embedded Product based on customer requirements. M onitor technology trends on HW and SW cybersecurity relevant functionalitiesalso comparing proposals from different vendors. Specify and select the basic HWand SW technologies needed to achieve the target performances and to ensure thebest cost/performance compromise. Define the cybersecurityconcept and document the functional repartition between HW and SW incooperation with HW and SW System Architects. Elaborate internal SystemRequirements related to cybersecurity in cooperation with the SystemRequirement Engineer, HW and SW System Architects Model the System at functionaland HW and SW level, also allocating System Requirements to the HW and SWSystem Blocks Provide governance in the HWand SW teams about different implementation proposals Ensure project execution andrelated work products are aligned with Cybersecurity processes andrequirements. Participate when requested tothe meetings with the customer supporting the Technical Project Leader (TPL)and SW Project Leader on technical discussions Deploy the Asset Analysis,Attack Surface and TARA. Estimate System performancesalso defining and using suitable models, in order to define the optimal HW andSW resources budget Responsible to analyzepotential security vulnerabilities. Key Skills Requirements management toolsknowledge (e.g. DOORS) System Architecture design Architecture modelingmethodologies and tools (SysML, UML, Enterprise Architect) Understanding of Cybersecuritystandards for automotive (ISO 21434, UNECE R155) Analytic tools andmethodologies (e.g. Asset Analysis, Attack Surface, TARA) Capability to effectivelydesign and use multiprocessor architectures Knowledge of Operating Systems(e.g.: Linux kernel-based OS) and real-time OS (e.g.: AUTOSAR) Silicon devices, processors,micro-controller Cybersecurity analysis and mechanisms (e.g.: Secure Boot,Trust Zone, HSM, Secure Updates FOTA, etc.) Product Development StandardProcesses Quality System knowledge Atlassian Suite (Jira,Confluence tools) knowledge Shall have experience withSecure Boot (controller specific secure boot and Android verified boot) Shall have conceptualunderstanding of securing user data and its confidentiality ( FBE andfs-verity). Shall have knowledge on workingprinciple of TLS and mTLS. Knowledge of DM-verity,FS-verity, Integrity measurement architecture (IMA), SE linux, OS Hardening andKernel Hardening is required. Shall have experience with OSand Kernal Hardening. Shall have experience withfirewall configuration. Shall have Knowledge of SElinux. Shall have knowledge workingprinciple of Trusted execution environment and Trusted Application (Keymasterand Gatekeeper) Shall have knowledge on Androidsecure storage. Working experience withQualcomm SOC is advantage. Experience with Vehicleinfotainment is added advantage. Knowledge of Virtualizationconcept using Containerization or hypervisor is added advantage. Language Skills Advanced written and spokenEnglish Education Former Experience Electronic Engineering Degree,Information Science Degree. Experience on HW and SW productdevelopment for the overall life cycle (from RFQ phase to Production followup). More than 6 years-experience ofembedded real time electronic product development with high level of SWcontents. The above competences have tobe maturated in automotive area or other large-scale markets. Experienced in planning, monitoring and control activities (ProjectManagement Tools)
