8 hours ago
Nanjing, ChinaMid Level
Responsibilities
- Lead TARA analyses for automotive projects and features using ISO/SAE 21434 methodology, identifying assets, attack vectors, threat scenarios, impact levels, and attack feasibility.
- Define cybersecurity objectives, concepts, and traceable requirements across hardware, software, and system levels.
- Guide architecture reviews and implementation of secure boot, secure OTA and diagnostic updates, HSM integration, secure debugging, secure logging, secure communication, and secure flashing.
- Develop cybersecurity verification plans with testing teams, including fuzz testing, penetration testing, and vulnerability scanning.
- Evaluate cybersecurity capabilities and documentation from Tier 1 and Tier 2 suppliers for MCUs, HSMs, and communication modules.
- Support PSIRT impact assessments and response activities for newly discovered vulnerabilities and security incidents in deployed vehicle fleets.
- Establish and maintain company network security processes and promote Security by Design across system, software, hardware, testing, and functional security teams.
Requirements
- Bachelor’s degree or above in computer science, information security, electronic engineering, vehicle engineering, automation, or a related field.
- More than three years of relevant network or information security experience in automotive electronics, industrial control, or embedded systems.
- At least one complete automotive cybersecurity implementation project, covering TARA analysis through mass-production SOP.
- Deep understanding of ISO/SAE 21434, TARA processes, and tools such as Medini Analyze and PTC Integrity.
- Familiarity with UN R155/R156 requirements and WP.29 compliance certification processes.
- Proficiency with CAN, CAN-FD, LIN, FlexRay, Automotive Ethernet, SOE/IP, and security extensions such as SecOC.
- Solid knowledge of embedded systems, including MCU/SoC, RTOS/Linux, HSM, and TEE principles.
- Good English reading ability, communication skills, teamwork, learning ability, diligence, and ability to work under pressure.
Benefits
- Mentoring, training, and access to global career opportunities.
- Flexible, autonomous work with support for work-life balance.
- Inclusive work environment that values people from all backgrounds.
- Benefits may include a 13th salary, annual bonus, paid vacation, pension plans, and personal insurance, depending on country and contract.
