Security Engineer within Vehicle Connectivity

This is us
The Vehicle Connectivity Cyber Security team is a small sub-team of the System Design group whose main responsibility is to develop and maintain system solutions and functions within the domain of Connectivity and Infotainment. The CS-team facilitate cyber security risk analysis (TARA) and provide expert support to guide functional concept development.
We also act as a shared service towards the Connectivity organisation and support our Agile Release Trains with cyber security engineering throughout the product lifecycle (i.e. during implementation, verification, and in maintenance). On top of this, we also work to develop the internal processes necessary for effective cyber security management, and act as a knowledge centre for cyber security within the Vehicle Connectivity department.


This is what you will do
As a security architect, we need you to develop the system-level concepts and designs intended to secure functionality in our current, future, and legacy products. You will collaborate with your security colleagues, project teams, and Agile Release Trains in order to identify cyber security design goals and develop those into system-level designs and requirements. More specifically, you will need to be able to:
Assist our risk analysts in the process of risk identification and TARA.
Identify security design goals in the early stages of concept design.
Collaborate with other security architects, product architects, and system leaders in order to develop security concepts that enable the requisite business purpose, whilst also adequately mitigating identified risks.
Document the design and write security requirements intended for further detailed break-down by security engineers and development teams.
Apply knowledge of security design at overall product architecture and system architecture levels. Identify design concepts which promote secure reuse of assets, cost benefits and risk optimization.
Support the governance of architecture artefacts for easy use and understanding for product development /change management
Reverse engineering complex architectures where applicable and identify potential solutions for risk mitigation.



Qualifications
Broad and Deep knowledge of cyber security threats and mitigating technologies (e.g. network security, PKI, cryptography, authentication, authorisation, application security, exploit mitigation, etc.) and tools
A solid understanding of secure design principles (e.g. defence-in-depth, least privilege, etc.).
5+ years of experience from an information security, or product cyber security related discipline (i.e. within IoT, Healthcare, Industrial controls, defence, etc.).
B.Sc. or M.Sc. degree from a relevant field, e.g. information security, cyber security, systems engineering or equivalent experience.
An understanding of security standards such as ISO27001, PCI-DSS, NIST 800-53 etc.
Good networking and communication skills with the ability to present and persuade appropriately.
Fluent communication in English (written and verbal).



It is meritorious for you to have one or more of the following:
Recognised industry certifications in cyber security.
Experience from the automotive industry.
Language skills in Swedish.