Job Description

Senior Engineer Product Cybersecurity - BASC At BASC we are in the heart of this transformation, and we work with developing and implementing in areas such as projection, Navigation, Entertainment, Vehicle HMI, 3rd party apps and End user functions such as Entertain the driver, Driver Coaching, ISee, Remote SW Download and Geofencing. Connectivity is a key enabler for fleet management, uptime services and advanced vehicle services like driver assistance and fuel reduction, targeting reduced costs as well as increased revenues. The development in the area of connectivity is fast, furious and fun and we are evolving rapidly! THIS IS US, YOUR NEW COLLEAGUES The BASC Cyber Security team is a small sub-team of the System Design group whose main responsibility is to develop and maintain system solutions and functions within the domain of Connectivity and Infotainment. The CS-team facilitate cyber security risk analysis (TARA) and provide expert support to guide functional concept development. We also act as a shared service towards the BASC organisation and support our Agile Release Trains with cyber security engineering throughout the product lifecycle (i.e. during implementation, verification, and in maintenance). On top of this, we also work to develop the internal processes necessary for effective cyber security management, and act as a knowledge centre for cyber security within the BASC department. ROLE DESCRIPTION We need you to develop the system-level concepts and designs intended to secure functionality in our current, future, and legacy products. You will collaborate with your security colleagues, project teams, and Agile Release Trains in order to identify cyber security design goals and develop those into system-level designs and requirements. More specifically, you will need to be able to: Assist our risk analysts in the process of risk identification and TARA. Identify security design goals in the early stages of concept design Collaborate with other security architects, product architects, and system leaders in order to develop security concepts that enable the requisite business purpose, whilst also adequately mitigating identified risks. Document the design and write security requirements intended for further detailed break-down by security engineers and development teams. Apply knowledge of security design at overall product architecture and system architecture levels. Identify design concepts which promote secure reuse of assets, cost benefits and risk optimization. Support the governance of architecture artefacts for easy use and understanding for product development /change management Reverse engineering complex architectures where applicable and identify potential solutions for risk mitigation. WHO ARE YOU This role requires a comprehensive understanding of cyber security design principles, threat modelling, and the \'attacker\' mindset. Your knowledge must be both broad and deep to cover the full spectrum of the cyber security landscape. Though it is desirable, prior automotive industry experience is not essential for this role, but prior experience working with cyber security is. It is important that you are self-motivated, and good at prioritizing and planning your work. Good networking- and communication skills are essential. Qualifications: BE/BTech/ME/Mtech in Electrical/Electronics and communication/Information Technology with 5-8 years of Experience in Automotive domain Experience in information security, cyber security, systems engineering or equivalent experience. Broad and Deep knowledge of cyber security threats and mitigating technologies (e.g. network security, PKI, cryptography, authentication, authorization, application security, exploit mitigation, etc.) and tools A solid understanding of secure design principles (e.g. defense-in-depth, least privilege, etc.). High experience from an information security, or product cyber security related discipline (i.e. within IoT, Healthcare, Industrial controls, defense, etc.). An understanding of security standards such as ISO27001, PCI-DSS, NIST 800-53 etc. Good networking and communication skills with the ability to present and persuade appropriately. ARE WE THE PERFECT MATCH Genuine interest in Telematics and Infotainment for Automotive domain. Knowledge / experience in technology architecture concepts and security architecture concepts from leading practices. Recognized industry certifications in cyber security. Experience from the automotive industry. Leadership skills Good experience in Agile WOW Knowledge of Service areas and System thinking Someone who enjoys working in a Global Organization with cross functional interaction \'The Volvo Group culture is defined by a set of five carefully chosen values- Customer success, Trust, Passion, Change, and Performance. These values guide our day-to-day behaviour and drive our decision-making at all levels of the organization. They express our shared beliefs across countries and entities to form the basis for a high-performing culture that can help maximize the full potential of the organization. Our company values help guide us on that journey\'.

foundit