Cybersecurity Embedded C Architect
我们正在寻找有才华和热情的建筑师或经验丰富的软件工程师，他们希望成为一名建筑师，并对嵌入式系统和软件以及网络安全问题感兴趣。这项职位需要全面了解软件架构和强大的分析技能，理想情况下可以由具有广泛知识的软件背景的人员填补，拥有网络安全算法，中级软件，通信协议和连接服务。作为我们的团队的一部分，你将帮助我们设计，设计和生产明天汽车的全新的更智能的架构。在这个位置上，你将负责：· 要求分析 （包括对网络安全影响的需求和威胁建模）• 从第三方供应商来评估解决方案并提供批准 • 创建和维护网络安全系统架构和产品开发文件 • 在整个产品开发过程中，在软件，硬件和制造业 （包括管理网络安全密钥）的发展活动中提供网络安全技术专业知识和监督。对最新软件安全技术的汽车应用进行研究 • 为原型和演示程序的开发制定实施策略 • 开发技术解决方案，以帮助缓解硬件，固件和软件网络攻击的安全漏洞•识别并利用嵌入式平台/操作系统来创建将改变未来汽车系统部署方式的新解决方案•作为对网络安全评估和评估的主要专家 •通过整合新的网络安全系统设计和验证方法引导产品团队的能力 要求资格：计算机科学，计算机工程，电气工程或类似学科士学位 •经历 C 和低级开发 • 强大的知识，包括网络化，加密技术和资源管理的嵌入式系统开发以及对这些系统进行定制设计经验。• 在安全功能/职能中工作经历丰富，并花时间处理安全事件和安全威胁管理。•熟悉网络安全工程，识别威胁载体，开展威胁分析和风险评估。•与企业架构师等工具合作经验。
查看英文原文
We are looking for talented and passionate architects or experienced software engineers who would like to become Architect and are interested in embedded systems and software as well as cybersecurity issues. This role, requiring a holistic understanding of the software architecture and strong analytical skills, would ideally be filled by an individual with a software background having a broad knowledge of cybersecurity algorithms, middleware, communication protocols, and Connected Services. As part of our team, you’ll help us engineer, design, and produce an entirely new and smarter architecture for tomorrow’s cars.
In this position, you will be responsible for :
- requirements analysis (including reviews for requirements with cybersecurity impacts and the Threat Modeling
- • Reviews solutions from 3rd party vendors and provides approval
- • creating and maintaining the cybersecurity system architecture and Product Development Document
- • Provides cybersecurity technical expertise and oversight in software, hardware, and manufacturing (including the management of cybersecurity keys) development activities throughout the entire product development. Perform research into the automotive applicability of the latest software security technologies
- • Create implementation strategies for the development of prototypes and demos
- • Develop technical solutions to help mitigate security vulnerabilities from hardware, firmware, and software cyberattacks
- • Identify and utilize embedded platforms/operating systems to create new solutions that will change how automotive systems are deployed in the future
- • Serve as a key subject matter expert for cybersecurity evaluations and assessments
- • Ability to guide product teams through the integration of new cybersecurity system designs and validation methodologies
Required Qualifications:
- Master’s Degree in Computer Science, Computer Engineering, Electrical Engineering or similar discipline
- • experience with C and low-level development
- • Strong knowledge of embedded systems development, including networking, cryptography, and resource management,t and experience designing customizations to those systems
- • Strong working experience working in the security function/s and have spent time handling security incidents and security threat management.
- • Familiarity with cybersecurity engineering, identifying threat vectors, and conducting threat analysis and risk assessment.
- • Experience in working with tools such as Enterprise Architect, Jira, and Polarion would be highly beneficial.
Preferred Qualification:
- Knowledge of regulations/standards (SAE/ISO) and associated regulatory frameworks such as ISO 21434 and UNECE WP29.
- • One or more relevant cybersecurity certifications such as ISO 21434 (CSMS).
- • Developing systems utilizing automotive communication systems (CAN, CAN-FD, automotive Ethernet, etc.)
- • Familiarity with Bluetooth, NFC, and/or Wi-Fi implementations and communications
- • Understand circuit schematics, hardware datasheets, logic design
- • Experience designing software/hardware interfaces such as device drivers and board support packages (BSPs)
- • Experience deploying AUTOSAR-compliant embedded platforms
- • Experience performing threat modeling and design reviews to assess security implications and requirements for the introduction of new technologies
- • Experience leveraging hardware security module (HSM), secure hardware extension (SHE), ARM Trust Zone, trusted execution environment (TEE), and/or similar security technologies?
Originally posted on Himalayas