Embedded Cybersecurity Engineer
Enterprise Technology plays a critical part in shaping the future of mobility. If you're looking for the chance to leverage advanced technology to redefine the transportation landscape, enhance the customer experience and improve people's lives, this is the opportunity for you. Join us and challenge your IT expertise and analytical skills to help create vehicles that are as smart as you are.
The Vehicle Cyber Security Engineer serves a key role in shaping the future of product development security for vehicles (e.g. Next-Gen Network Architecture, Diagnostics, Autonomous Vehicle, Ford Smart Mobility, and Offensive Security Analysis).
The engineer will work within cross functional team to do/support the following:
Perform assessments on content supporting Ford's product lines
Deliver Compliance reviews on features, functions, platforms, and modules as defined in the Ford Cybersecurity engineering process in compliance with relevant global
Cybersecurity requirements, standards, and regulations such as ISO 21434 / R155
Identify and engineer applicable Cybersecurity requirements into product design and development life cycle from ideation to testing with required deliverables
Review and approve/reject supplier deliverables for conformance with existing Cybersecurity requirements.
Work with content owners to manage progression through the development process to ensure security by design from inception
Ensure features, components, systems are designed using robust engineering processes including threat analysis, risk assessment, adoption of security requirements, security audits, and vehicle ecosystem assessments
Develop and utilize global supplier expertise to meet cyber security expectations
Create and deliver risk reviews to management for concerns not mitigated through controls (security governance board, chief engineers, executive leadership, and related roles)
Support the re-use model incorporated into the CSMS to reduce reapplication of work across vehicle programs.
Bachelor's degree in Computer Science, Computer Engineering, or related domains OR a combination of education and experience.
5+ years of experience with embedded, IoT and/or product systems Cybersecurity
Functional knowledge of cryptographic controls and strategies for their application.
Experience with security system engineering, development, and testing
Experience developing and maintaining engineering documentation including requirements, specifications, test plans, etc.
Self-starter with ability to work independently and collaboratively
Strong communication and analytical skills
Even better, you may have...
Certified in CISSP or Security+
Relevant experience with vulnerability assessment management
History with threat modeling using industry standards such as MITRE ATT&CK or STRIDE
Required Languages
🇬🇧 English