Project Role : Custom Software Engineer
Project Role Description : Develop custom software solutions to design, code, and enhance components across systems or applications. Use modern frameworks and agile practices to deliver scalable, high-performing solutions tailored to specific business needs.
Must have skills : Automotive Functional Safety & Security
Good to have skills : NA
Minimum 15 Year(s) Of Experience Is Required
Educational Qualification : 15 years full time education
Summary
We are seeking a Cybersecurity Domain SME to define and govern ISO/SAE 21434- and UNECE WP.29-aligned validation coverage on dedicated cybersecurity benches. This role owns the mapping of automotive cybersecurity requirements to bench-based validation scenarios, reviews AI-assisted anomaly and log-analysis outputs for security relevance, and ensures the program's Cybersecurity Management System (CSMS) evidence expectations are met for the assigned scope.
Roles & Responsibilities
- Read and interpret TARA (Threat Analysis and Risk Assessment) outputs to derive cybersecurity bench test scope — penetration, fuzz, boundary, and replay test cases — aligned to ISO/SAE 21434 and UNECE WP.29/R155 CSMS expectations.
- Apply Cybersecurity Assurance Level (CAL 1–4) classification to determine test rigour and evidence obligations for each validation scenario.
- Design and review test cases covering automotive attack surfaces — CAN/CAN-FD, Ethernet, UDS, OBD-II, OTA — including UDS diagnostic security testing (seed/key, security access, session management).
- Review vulnerability classification and risk treatment using CVSS adapted for automotive context, and oversee validation approaches for automotive PKI, secure boot, and key management where in scope.
- Own requirements-to-test and TARA-to-test traceability for cybersecurity requirements in Jama Connect and TestRail.
- Support coverage-gap analysis and improvement planning for the cybersecurity domain (untested attack paths vs. TARA alignment), including audit-ready CSMS/type-approval evidence packages.
- Review AI-assisted log analysis, anomaly detection, and defect classification outputs for cybersecurity relevance before action, ensuring alignment to client-approved AI governance.
- Support vulnerability triage, root cause analysis, and severity classification for security-relevant findings, linking findings back to TARA and release context.
- Report cybersecurity coverage status, risk, and mitigation planning in monthly governance reviews.
Professional & Technical Skills
- 12+ years of experience in automotive cybersecurity engineering/validation, with hands-on ISO/SAE 21434 full CSMS lifecycle experience (with depth in verification and validation activities) and UNECE R155/R156.
- Expert-level ability to read and interpret TARA outputs to derive test cases, and to apply Cybersecurity Assurance Level (CAL 1–4) classification to test rigor and evidence obligations.
- Strong understanding of automotive attack surfaces — CAN, CAN-FD, Ethernet, UDS, OBD-II, OTA — and vulnerability classification/risk treatment using CVSS adapted for the automotive context.
- Working knowledge of automotive PKI, secure boot, and key management validation approaches.
- Experience with cybersecurity validation across network security, embedded OS (Linux/Android/RTOS), and hardware-adjacent test scenarios.
- Familiarity with vulnerability scanning/assessment methodologies and CVE tracking/change-impact analysis.
- Working knowledge of ASPICE and its interface with the cybersecurity engineering lifecycle.
- Distinct, hands-on toolchain fluency: CANalyzer/CANoe (Vector) for network monitoring, stimulation, and attack test modules Jama Connect for cybersecurity requirements and TARA traceability TestRail for cybersecurity test case and execution management CAPL for CAN/CAN-FD stimulation and diagnostic scripting and Python for fuzz-testing scripts and protocol test utilities (e.g., scapy-based or custom fuzzers).
- Ability to review AI-assisted validation outputs for security correctness.
- Strong documentation skills for client-facing CSMS/audit and type-approval evidence.
Additional Information
- Minimum 15 years of experience in Automotive Cybersecurity Engineering.
- This position is based at our Bengaluru/Pune office (offshore, supporting a US-based onsite counterpart team).
- Bachelor's/Master's degree in Engineering, Computer Science, or Cybersecurity is required.
- ISO/SAE 21434 or equivalent automotive cybersecurity certification preferred
IN
