Architect - Cybersecurity
HARMAN InternationalResponsibilities
- Develop and maintain cybersecurity concepts, requirements, architectures, interface specifications, and verification criteria for automotive products.
- Plan and document Threat Analysis and Risk Assessment activities and derive cybersecurity goals, requirements, and risk-treatment decisions.
- Create and review ISO/SAE 21434 work products with traceability from risks through controls, verification evidence, and residual-risk decisions.
- Define security controls for Android Automotive, Linux-based infotainment, telematics, connected systems, backend services, and OTA updates.
- Design and review cryptographic, PKI, authentication, authorization, encryption, secure communications, API, identity, secrets-management, and cloud-security controls.
- Support CSMS, SUMS, UNECE R155, UNECE R156, Vehicle Type Approval, audits, assessments, and cybersecurity evidence activities.
- Define cybersecurity verification and validation strategies, including security testing, vulnerability analysis, fuzz testing, penetration-testing support, and remediation verification.
- Assess and coordinate vulnerability treatment, security patch integration, disclosure, post-production monitoring, and incident-response readiness.
- Coordinate cybersecurity planning, supplier reviews, distributed development, cybersecurity cases, compliance gaps, and corrective actions.
- Present cybersecurity risks, assumptions, decisions, remediation plans, and technical guidance to engineering, program, quality, compliance, and non-security stakeholders.
Requirements
- Bachelor’s degree in computer science, cybersecurity, electrical engineering, software engineering, telecommunications, or a related technical discipline.
- Professional experience in automotive cybersecurity, embedded security, product security, or security architecture; the required number of years is to be confirmed.
- Hands-on experience applying ISO/SAE 21434 and producing or reviewing automotive cybersecurity engineering work products.
- Practical experience conducting and documenting TARA activities and deriving cybersecurity goals, claims, requirements, and risk-treatment measures.
- Working knowledge of UNECE R155, CSMS, Vehicle Type Approval, UNECE R156, SUMS, and automotive OTA security considerations.
- Experience with cybersecurity concepts, system security architectures, cybersecurity requirements, interface controls, design decisions, and verification strategies.
- Strong understanding of embedded and connected-system security, secure boot, roots of trust, hardware-backed key storage, Trusted Execution Environments, cryptography, PKI, authentication, authorization, secure communications, and secure diagnostics.
- Knowledge of Android Automotive or Android platform security, SELinux, application permissions, sandboxing, keystore concepts, Trusted Applications, JSSE, and platform update security.
- Knowledge of Linux security, access control, privilege separation, hardening, service isolation, secure configuration, logging, and OpenSSL-based communications.
- Understanding of telematics, connected-vehicle interfaces, OTA systems, vehicle-to-cloud communication, backend security, and API security fundamentals.
- Experience with security testing, vulnerability analysis, fuzz testing, penetration-testing coordination, and remediation verification.
- Ability to maintain requirements-to-test and risk-to-control traceability and communicate proportionate mitigations across product, safety, usability, performance, and delivery constraints.
- Strong written and verbal communication skills and working proficiency in English.
- Preferred qualifications include a relevant master’s degree, cybersecurity certifications such as CISSP, CSSLP, CCSP, or OSCP, and automotive cybersecurity certification.
- Preferred experience includes ISO 24089, ISO 26262, Automotive SPICE, TISAX, ISO/IEC 27001, cybersecurity cases, hardware security modules, secure elements, TPMs, TrustZone, hypervisors, automotive communication protocols, software composition analysis, SBOMs, DevSecOps, cloud security, IAM, OAuth 2.0, OpenID Connect, and security monitoring.
Benefits
- Hybrid work environment with most office-based roles onsite three days per week.
- Employee discounts on HARMAN and Samsung products, including JBL, HARMAN Kardon, and AKG.
- Training opportunities through HARMAN University.
- Competitive wellness benefits.
- Tuition reimbursement.
- Be Brilliant employee recognition and rewards program.
- Inclusive and diverse environment supporting professional and personal development.
- Work authorization, location, hybrid expectations, and travel requirements are to be confirmed; travel may be required.
About HARMAN International
Headquartered in Stamford, Connecticut, HARMAN (harman.com) designs and engineers connected products and solutions for automakers, consumers, and enterprises worldwide, including connected car systems, audio and visual products, enterprise automation solutions; and services supporting the Internet of Things. With leading brands including AKG®, Harman Kardon®, Infinity®, JBL®, Lexicon®, Mark Levinson® and Revel®, HARMAN is admired by audiophiles, musicians and the entertainment venues where they perform around the world. More than 50 million automobiles on the road today are equipped with HARMAN audio and connected car systems. Our software services power billions of mobile devices and systems that are connected, integrated and secure across all platforms, from work and home to car and mobile. HARMAN has a workforce of approximately 30,000 people across the Americas, Europe, and Asia. In March 2017, HARMAN became a wholly-owned subsidiary of Samsung Electronics Co., Ltd. HARMAN is an Equal Opportunity, Affirmative Action employer. Minorities, women, veterans and individuals with disabilities are encouraged to apply. HARMAN offers a great work environment, challenging career opportunities, professional training and competitive compensation. Looking for a challenge where your experience is valued? Come see what you can achieve as a leader with HARMAN!