Cybersecurity Engineer (Systems) at BorgWarner

Cracow, Lesser Poland Voivodeship, Poland

Apply Now

Not SpecifiedCompensation

Mid-level (3 to 4 years)Experience Level

Full TimeJob Type

UnknownVisa

Automotive, ElectrificationIndustries

Requirements

2+ years of experience in an embedded cybersecurity position or 4+ years in an embedded systems development, preferably for ASPICE compliant projects
Understanding of multi-core embedded microcontrollers that use HTAs (hardware trust anchors) or HSMs (hardware security modules)
Understanding of cybersecurity specific testing such as penetration and fuzz testing
Passionate and forward-thinking about cybersecurity and the needs of the ever-changing automotive industry
Good understanding of formal risk assessment and management, knowledge of NIST SP-800-30 and ISO IEC 31010
Experience in the automotive or transportation domain

Responsibilities

Conduct the cybersecurity activities for a given project with a collaborative team that takes into consideration customer specifications, the cybersecurity process and bring their own experience into what is needed
Interface with customer on technical cybersecurity requirements and issues
Create a cybersecurity assurance case per project and the related documentation that provides the argument for the achieved degree of cybersecurity on their project
Perform cybersecurity risk assessments and threat modelling within a product scope
Analyse and determine safety, financial, operational and privacy issues identified in a risk analysis
Where there are safety impacts, work with the Functional Safety (ISO 26262) team to find solutions that do not compromise safety or security
Suggest countermeasures appropriate to the project given the technical constraints or operational limitations
Create and maintain a knowledge database of typical assets, threats and attack paths for our product portfolio to leverage re-use
Create and maintain solutions to manage cybersecurity risks
Drive cybersecurity solution development and provide technical support for hardware and software teams
Engage with suppliers to evaluate cybersecurity capabilities and track reported vulnerabilities
Evaluate new tools (Threat Analysis tool, Software Bill of Material tool, etc.)
Be part of vulnerability monitoring and incident response teams
Follow and contribute to the secure development lifecycle at BorgWarner
Network and maintain a high-level of industry knowledge (e.g. participation in Auto-ISAC events, SAE workshops)
Help promoting a safety and security culture
Support the roll-out of processes and procedures compliant with latest cybersecurity standards and regulations
Assist in training and raising awareness, organizing events

Skills

Key technologies and capabilities for this role

Automotive CybersecuritySecure BootHardware Security ModulesSecure On-Board CommunicationSecure DiagnosticsImmobilizersManipulation DetectionKey ManagementCybersecurity Assurance CasesSystems Engineering

Questions & Answers

Common questions about this position

What is the employment type for this Cybersecurity Engineer position?

The position is full-time.

Is this Cybersecurity Engineer role remote or office-based?

This information is not specified in the job description.

What are the key responsibilities for the Cybersecurity Engineer?

Key responsibilities include conducting cybersecurity activities for projects, interfacing with customers on technical requirements, performing risk assessments and threat modeling, creating assurance cases, and driving solution development for hardware and software teams.

What is the company culture like at BorgWarner?

BorgWarner is a company of innovators and independent thinkers that brings together talented employees, meaningful work, and amazing technology in a unique environment, constantly working towards a clean and energy-efficient world.

What makes a strong candidate for this Cybersecurity Engineer role?

A strong candidate should have experience in automotive cybersecurity standards, threat modeling, risk assessments, and working collaboratively with development teams, customers, and suppliers on secure vehicle solutions for powertrain electrification.