Automotive Cybersecurity Architect

Ready to join the future of innovation at TrustMotion?

TrustMotion (former TTTech Auto), part of NXP, is a leading software platform product and service provider with a focus on System, Safety, and Security for the Software-Defined Vehicle (4SDV).

As Cybersecurity Architect Expert you will be part of the Security Engineering team. We are a multidisciplinary team composed of Cybersecurity Architects and Cybersecurity Managers from different industries (automotive, smartcards, embedded, IoT, railway...). We develop Out of Context and In Context middleware products for the automotive industry, focusing specifically on ADAS and in the next generation of Communication paradigms of SDV. Our mission is to ensure that our products are secure by implementing the right technologies and features, and ensuring the security maturity matches the expectations of our customers and addressing compliance with Standards and Regulations. As Security Architect, you will analyze system threats and risks and will define mitigation strategies that will be translated into architectural decisions, together with an experienced team of SW Architects, Developers and other security specialists.

Product of the Position

Analyze system threats and risks to define cybersecurity measures that drive architectural decisions for products and projects, ensuring cybersecurity risks remain under control. Support security management activities by producing the required evidence, KPIs, and work products while ensuring compliance with automotive cybersecurity industry standards.

Your Responsibilities:

• •Conduct threat analysis and risk assessments to identify potential cybersecurity threats, derive cybersecurity requirements and design solutions to mitigate risks.
• •Define cybersecurity specification and technical requirements for product development and testing.
• •Define cybersecurity events, identify item weaknesses and make vulnerability analysis on the item.
• •Define Cybersecurity goals and Cybersecurity claims.
• •Define Cybersecurity specifications, control and requirements.
• •Produce ISO21434 related work products and evidence.
• •Sometimes, act as a security assessor or auditor for projects developed by other team colleagues.
• •Act as deputy of the Security Manager of the project.
• •Support customer interface activities by providing technical expertise to the discussion.
• •Support the project and product in all the development phases, including requirements creation, design and testing, ensuring the correctness and collecting evidence of cybersecurity being implemented according to the cybersecurity processes and industry standards.
• •Guide and assist the development teams and stakeholders by coaching and mentoring in Cybersecurity.
• •Facilitate the estimation process for new projects and cybersecurity features.
• •Analyze system and software architecture for automotive projects and lead the design of the Cybersecurity related features aligned with business goals and industry best practices.
• •Oversee correctness of software implementation and verification.
• •Monitor cybersecurity information and manage vulnerabilities.
• •Be and act as an assessor and ambassador of cybersecurity practices in the Business Unit.
• •Explore emerging new technologies and industry best practices.
• •Prepare training programs for development teams.
• •Support the Cybersecurity Managers in creating, adapting, and improving cybersecurity processes for Software Development in critical environments.

Education

University’s Degree in Engineering

Must Have

• •10-15 years experience in SW Architecture
• •5 years experience in Automotive Cybersecurity Standards (ISO21434, ASPICE for Cybersecurity, UNECE WP.29)
• •5 years experience System Security experience
• •Cybersecurity Standards
• •Automotive Industry Standards
• •Analytical Thinking
• •Results and Solution Orientation
• •Threat Modeling, Risk Management, Security Controls
• •Cryptography

Nice to have

• •CISM, CISSP, or similar certifications
• •Embedded Security experience
• •Functional Safety Knowledge
• •SW Modeling including UML
• •Model Development
• •AUTOSAR, QNX
• •Understanding the dichotomy of Problem Space and Solution Space

----------

#LI-6710