2 months ago
Nanjing, ChinaMid Level
Responsibilities
- Lead TARA analyses for automotive projects and features using ISO/SAE 21434 methodology, identifying assets, attack vectors, threat scenarios, impact levels, and attack feasibility.
- Define cybersecurity objectives, concepts, and traceable requirements across hardware, software, and system levels.
- Guide architecture reviews and implementation of secure boot, secure OTA and diagnostic updates, HSM integration, secure debugging, secure logging, secure communication, and secure flashing.
- Develop cybersecurity verification plans with testing teams, including fuzz testing, penetration testing, and vulnerability scanning.
- Evaluate cybersecurity capabilities and documentation from Tier 1 and Tier 2 suppliers for MCUs, HSMs, and communication modules.
- Support PSIRT impact assessments and response activities for newly discovered vulnerabilities and security incidents in deployed vehicle fleets.
- Establish and maintain company network security processes and promote Security by Design across system, software, hardware, testing, and functional security teams.
Requirements
- Bachelor’s degree or above in computer science, information security, electronic engineering, vehicle engineering, automation, or a related field.
- More than three years of relevant network or information security experience in automotive electronics, industrial control, or embedded systems.
- At least one complete automotive cybersecurity implementation project, covering TARA analysis through mass-production SOP.
- Deep understanding of ISO/SAE 21434, TARA processes, and tools such as Medini Analyze and PTC Integrity.
- Familiarity with UN R155/R156 requirements and WP.29 compliance certification processes.
- Proficiency with CAN, CAN-FD, LIN, FlexRay, Automotive Ethernet, SOE/IP, and security extensions such as SecOC.
- Solid knowledge of embedded systems, including MCU/SoC, RTOS/Linux, HSM, and TEE principles.
- Good English reading ability, communication skills, teamwork, learning ability, diligence, and ability to work under pressure.
Benefits
- Mentoring, training, and access to global career opportunities.
- Flexible, autonomous work with support for work-life balance.
- Inclusive work environment that values people from all backgrounds.
- Benefits may include a 13th salary, annual bonus, paid vacation, pension plans, and personal insurance, depending on country and contract.
About Danfoss
Danfoss designs and manufactures components and systems for refrigeration, HVAC, motor control, power conversion, hydraulics, and district energy used by OEMs, builders, and utilities. The family-owned company, founded in 1933 and headquartered in Nordborg, Denmark, sells compressors, valves, sensors, drives, and power solutions worldwide. Its products support electrification and energy efficiency across industrial machinery, automotive and marine equipment, and city heating and cooling infrastructure.