Vehicle Cyber Security Product and Processes

Role:

• Manage team for Vehicle cyber security Implementation as per UNR155
• Lead the team for various activities related to CS implementation like TARA, preparing CS concept, CS product specification, CS verification, PSIRT etc
• Supporting Automotive ECUs development teams for CS implementation
• Supporting vehicle homologation team during discussion with certification agencies and vehicle type approval

Responsibilities:

• Develop a cost-effective Vehicle CS concept and CS solution for relevant controllers.
• Develop process to manage CS requirements, specification, verification, PEN testing etc. (RFQ, SOR, SPEC, TARA, CHECKLIST, etc.)
• Project management: Plan and monitor CS development activities for smooth implementation as per UNR155 in various models.
• Supporting CS capability development of team and relevant stakeholders
• Verification of ECU part level CS test result and analysis report
• Verification of vehicle-level cybersecurity measures including type-approval demonstration to regulatory agencies
• CS Vulnerability Incident Management (PSIRT)
• Compiling cybersecurity relevant incidents, technology trends industry best practices and sharing it with internal workgroup

Competency

Technical/ Functional:

• Knowledge of ISO21434, ISO 24089, ISO 26262 standards.
• Hands on TARA experience i.e. Identify cyber security assets, threat vectors, attack path, risk assessment etc
• Knowledge of various CS measures applied on Hardware, Software, In vehicle server communication.
• Hands-on experience in automotive ECU CS development i.e. CS development cycle implementation (Concept/ CS Specifications / Product Development etc)
• Cryptography - Knowledge of various cryptographic algorithms/function applied for protection of different cybersecurity properties. Awareness for global standards e.g., NIST, FIPS
• Practical experience of ECU embedded software development

Desirable:

• Automotive OEM experience: Vehicle design and development cycle
• System level understanding of various vehicle functions and functional safety compliance.
• Ethical hacking, penetration testing at ECU and/or vehicle level.
• Knowledge of Japanese language would be an added advantage.