E/E Cluster Head

Job description

Your missions

1. Responsible for cybersecurity requirements analysis, threat analysis and risk assessment (TARA) at vehicle and ECU level.
2. Design and implement security architecture and security mechanisms (HSM, Secure Boot, TLS/SecOC, MACsec, IDPS, etc.).
3. Develop cybersecurity software components compliant with ISO/SAE 21434 and UNECE WP.29 CSMS.
4. Develop security test cases, perform penetration testing, fuzz testing and vulnerability scanning, and drive vulnerability remediation to closure.
5. Lead security incident emergency response and OTA security patch release.
6. Establish and maintain secure development lifecycle (SDL), secure coding guidelines and automated security testing pipelines.
7. Participate in projects related to OTA security, V2X or autonomous driving cybersecurity.
8. Be familiar with coordinated analysis of functional safety (ISO 26262) and cybersecurity.
9. Hold security certifications such as CISSP/OSCP/GWAPT/CREA.
10. Have experience in security hardening for AUTOSAR Adaptive or Linux/QNX.

Your profile

1. Bachelor’s degree or above, with 3+ years of experience in automotive electronics or embedded cybersecurity development.
2. Familiar with CAN/CAN-FD, Ethernet, LIN, UDS, DoIP, Some/IP and other protocols.
3. Proficient in ISO/SAE 21434, UNECE WP.29, NIST SP 800-53/82 or EVITA methodology.
4. Proficient in C/C++, Python or Rust, with hands-on experience in MISRA-C / CERT-C secure coding practices.
5. Familiar with HSM, TPM, ARM TrustZone, AUTOSAR Crypto Stack and secure boot chain.
6. Experienced in penetration testing, fuzz testing (AFL, Peach) and static code analysis (Coverity, CodeSonar).
7. Good English reading and writing skills, able to independently draft security requirements, test reports and regulatory responses.

 

What we offer

• An international community, bringing together 110+ different nationalities
• An environment where trust has a central place: 70% of our key leaders started their careers at the first level of responsibilities
• A robust training system with our internal Academy and 250+ available modules
• A vibrant workplace that frequently gathers for internal events (afterworks, team buildings, etc.)
• Strong commitments to CSR, notably through participation in our WeCare Together program

Amaris Consulting is proud to be an equal-opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics .

Who are we?

Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1000 clients across the globe, we have been rolling out solutions in major projects for over a decade – this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We’re focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your steppingstone to cross rivers of change, meet challenges and achieve all your projects with success.

At Amaris, we strive to provide our candidates with the best possible recruitment experience. We like to get to know our candidates, challenge them, and be able to give them proper feedback as quickly as possible. Here's what our recruitment process looks like:   

Brief Call: Our process typically begins with a brief virtual/phone conversation to get to know you! The objective? Learn about you, understand your motivations, and make sure we have the right job for you! 

Interviews (the average number of interviews is 3 - the number may vary depending on the level of seniority required for the position). During the interviews, you will meet people from our team: your line manager of course, but also other people related to your future role. We will talk in depth about you, your experience, and skills, but also about the position and what will be expected of you. Of course, you will also get to know Amaris: our culture, our roots, our teams, and your career opportunities!

Case study: Depending on the position, we may ask you to take a test. This could be a role play, a technical assessment, a problem-solving scenario, etc.   

As you know, every person is different and so is every role in a company.  That is why we have to adapt accordingly, and the process may differ slightly at times. However, please know that we always put ourselves in the candidate's shoes to ensure they have the best possible experience. 
We look forward to meeting you!