Senior Product Cybersecurity Architect

What You’ll Do

Define and evaluate the implementation of cybersecurity controls, including but not limited to, embedded operating system, encryption, access controls, network security, middleware, and secure coding practices.

• Specific hands-on knowledge with implementation of cybersecurity embedded operating systems, networking, and cryptographic controls (e.g. securing embedded Linux, QNX, Ethernet, cellular telematics).
• Conduct, with a cross-functional team, process activities to define requirements, find design deficiencies, detect implementation defects, verify the product’s cybersecurity posture, and otherwise secure Torc’s products.
• Collaborate with product development teams to embed security into their design and development lifecycle of products and other software development activities.
• Stay abreast of emerging cybersecurity threats and technologies and continuously update our software security approaches, strategies, and solutions accordingly.
• Liaise with external security vendors and partners, managing relationships, and ensuring the effective integration of third-party security solutions.
• Prepare and present evidence in the cybersecurity case to demonstrate readiness to launch new products or release new software versions from a cybersecurity perspective.
• Train internal stakeholders on security practices and act as a resource where expert cybersecurity assistance is needed.

What You’ll Need to Succeed

• 5+ years of experience hands-on engineering with safety-critical, cyber-physical systems (automotive, aerospace, medical).
• Bachelor's or Master's degree in computer science, electrical engineering, or related technical field plus demonstrated competences and technical proficiencies typically acquired through 6+ years of experience.
• Strong understanding of cybersecurity principles and practices for embedded, automotive, and autonomous systems.
• Must have strong demonstrated working usage of embedded operating systems (Linux, QNX, AUTOSAR) and embedded networking.
• Proficiency in recognizing software/hardware weaknesses security vulnerabilities and documentation through Threat Modeling.

Bonus Points

• Experience in the autonomous vehicle industry, particularly with L4 self-driving technology.
• Experience with embedded automotive systems and embedded threat modeling.
• Experience with Classic AUTOSAR.
• Knowledge of cybersecure development lifecycles such as the Microsoft SDL, ISO 21434, AVCDL, or similar.