Embedded Cyber Security Engineer

Our client is seeking an Embedded Cyber Security Engineer to support the development of secure connected systems across the marine and automotive sectors. This permanent opportunity is suited to a hands-on cyber security engineer with an embedded systems or broader engineering background, who can contribute across the complete product lifecycle from concept and design through to production, operation, maintenance and decommissioning.

Key Responsibilities:

Perform Threat Analysis and Risk Assessments (TARA) and other security analysis activities to identify, assess and mitigate cyber security risks
Plan, initiate and track cyber security engineering activities, resources, deliverables and lifecycle milestones
Develop and manage cyber security activities across system, hardware and embedded software engineering disciplines
Derive cyber security requirements from risk assessments and allocate them across system, hardware and software boundaries
Review and influence system, hardware and software architectures, including secure communication flows, trust boundaries and attack surfaces
Coordinate with customers, suppliers, penetration testers, external assessors and certification authorities
Review Cybersecurity Requirements Specifications, security concepts and architecture documents to identify potential vulnerabilities across design, integration, testing, production and over-the-air updates
Support vulnerability assessments using methods such as Attack Tree Analysis, STRIDE, DREAD, vulnerability scanning, penetration testing coordination and fuzz testing

Job Requirements:

Significant hands-on experience in cyber security engineering within the automotive, marine, industrial, machinery, aviation, aerospace or related sectors
Engineering experience with the ability to read and understand hardware and software technical datasheets, specifications and embedded system architectures
Strong understanding of embedded systems, E/E hardware, embedded software and system engineering principles
Ability to assess cyber security risks at architectural level and develop practical mitigation strategies
Understanding of relevant standards and regulations, such as ISO/SAE 21434, UNECE WP.29 R155 and R156, IEC 62443, ISO/IEC 27001, DO-326A and ED-202A
Understanding of Model-Based Systems Engineering (MBSE) and SysML for describing system architectures, secure communication flows, trust boundaries and state changes
Ability to derive, manage and trace cyber security requirements while balancing technical trade-offs and system constraints
Confident communication, negotiation and stakeholder management skills, with the ability to influence internal and external design decisions

Desirable Attributes:

A practical, solution-focused mindset and the confidence to investigate technical issues independently
Willingness to learn and apply new cyber security standards, regulations, methods and tools
Experience working with Tier 1 or Tier 2 suppliers, secure connected systems or embedded product development
Ability to work collaboratively with engineering, software, hardware, supplier and customer teams

Benefits:

Permanent opportunity within the marine and automotive technology sectors
Involvement in complex embedded systems and secure connected product development
Opportunity to work across the full engineering and cyber security lifecycle
Exposure to customers, assessors, certification authorities and multidisciplinary engineering teams
Support for continued professional learning and development
This is an excellent opportunity for a hands-on Embedded Cyber Security Engineer to influence secure system architecture and deliver practical cyber security solutions in demanding engineering environments. Apply now to take the next step in your career