Cybersecurity Engineer
- Brașov
- Permanent
- Full-time
- Collect technical needs for targeted product
- Create and update Cybersecurity plan
- Support system team in Item definition
- Manage Threat Analysis and Risk Assessment (TARA) including CAL quotation (if applicable)
- Define and/or assess Cybersecurity Goals
- Harmonize customer cybersecurity requirements and internal product requirements.
- Development of Functional Cybersecurity Concept and associated requirements
- Development of Technical Cybersecurity Concept and associated requirements
- Traceability of customer needs.
- Participate to system architecture definition for cybersecurity needs.
- Understand and focus on interrelationships between elements of system
- Support DFMECA (Function, Component and SW)
- Support FTA (qualitative and quantitative) and associated summary report
- Support Project Manager or Change Leader for all cybersecurity needs
- Create and maintain Cybersecurity case
- Participate to reviews from design activities
- Evaluate cybersecurity aspects of the design (system, HW and SW)
- Check cybersecurity requirements are implemented and verified according to requested CAL (if applicable)
- For specifications, design and architecture (DOORS, Enterprise architect, Item toolkits, Excel)
- For issues: Technical Evolution Demand (or equivalent), management of configuration items.
- Overall fulfilment of the role with respect to industry standards such as ISO 21434 (according to the V-Cycle)
- Main component (IC): specification of technical characteristics of component
- Micro-controller: specification of technical characteristics of μC
- Development tools: Requirement management tools, architecture development tool, test tools
- Methods: formal specification, functional analysis, requirement verification
- Quality tools: respect of A-SPICE, CMMI, ISO26262, Autoliv checklists
- Evaluating the cybersecurity workload (PBS, WBS)
- Establishing a detailed progress cybersecurity task report with the referring product design leader / serial life product engineering leader
- Supporting review of customer CIA and establishing supplier CIA
- Establishing development plan for Cybersecurity activities (Cybersecurity plan)
- Identifying corrective actions and directing them to the referring product engineering leader for design progress meetings.
- Collecting data for the cybersecurity indicators update.
- Supporting in definition of cybersecurity related tests.
- Create and maintain documentation (according to Autoliv Cybersecurity process)
- Participating to internal and external reviews
- Supporting technical risk analysis
- Supporting supplier agreement contract
- Collecting data to provide indicators
- Integrating and releasing cybersecurity deliveries
- Bringing support to the system, software and hardware designers to handle issues
- Participating to traceability matrix creation
- Participating to system development audits
- Participating to Change Control Board
- Manage cybersecurity vulnerabilities, survey and collect potential cybersecurity vulnerabilities
- Monitor incident response
- Identify and deploy corrective actions when deemed required according to change management process
- In term of feasibility, technical aspects for products and process
- For next-generation embedded Safety products, from the cybersecurity engineering point of view
- ISO 21434 - Automotive Cybersecurity
- System engineering
- Hardware and Software knowledge in embedded projects
- Development method for embedded system
- Development quality constraints (SFEA / FMEA / FTA)
- Encryption algorithm implementation and numerical computation
- DOORS