Cybersecurity Engineer - Automotive Cybersecurity Engineer (ISO/SAE 21434)

Project Duration and Scope: # Initial Phase: ~0.25 FTE for ~3 months. # Extension possible after approx. 3 months (main implementation): ~1.0 FTE for ~12 months. # Regular progress and deliverable reviews. ##### ##### Project Context: Support of an automotive cybersecurity workflow through concept, development, verification/validation, supplier coordination, production, and post-development. Customer environment aligned with ISO/SAE 21434 and UN R155. ##### ##### Key Deliverables: # Creation and maintenance of cybersecurity artifacts: Item definition, TARA, cybersecurity concept, objectives/controls, requirements. # Maintenance of CS plan, work-product tracking, cybersecurity case, assessment, and release notes with clean versioning. # Establishment and maintenance of supplier coordination (cybersecurity interface agreements, supplier capability assessment, monitoring). # Provision of verification and validation evidence as well as test coverage metrics. # Cybersecurity input for production, operations, and post-development. ##### ##### Responsibilities: # Conducting and maintaining the TARA (Test and Validation Analysis) throughout the entire lifecycle. # Creating and updating item definitions, cybersecurity concepts, objectives/controls, and requirements. # Ensuring traceability across threats, requirements, tests, and validation. # Defining integration and verification requirements and supporting validation activities. # Creating and maintaining cybersecurity interface agreements and supplier monitoring. # Contributing to secure design reviews and addressing known vulnerabilities. # Creating artifacts for production and operations and supporting operational cybersecurity. ##### ##### Qualifications

• Must_ # At least 3 years of experience in automotive/product cybersecurity. # Sound knowledge of ISO/SAE 21434 and UN R155. # Experience in TARA, threat modeling, and deriving cybersecurity requirements. # Knowledge of automotive communication protocols (e.g., CAN, Ethernet, diagnostics). # Experience with analysis and testing tools (e.g., network or bus analysis tools). # Scripting skills (general scripting language). # Familiarity with structured development processes (e.g., ASPICE) and lifecycle/requirements management tools. #####