Automotive Cybersecurity Architect

• Analyze system threats and risks to define cybersecurity measures that drive architectural decisions for products and projects
• Support security management activities by producing required evidence, KPIs, and work products while ensuring compliance with automotive cybersecurity industry standards
• Conduct threat analysis and risk assessments; derive cybersecurity requirements and design mitigation solutions
• Define cybersecurity specifications, technical requirements, events, goals, claims, controls, and requirements
• Identify item weaknesses and perform vulnerability analysis
• Produce ISO
  21434-related work products and evidence
• Act as a security assessor or auditor for projects developed by colleagues
• Act as deputy of the Security Manager of the project
• Support customer interface activities with technical expertise
• Support projects and products through requirements, design, and testing phases, ensuring correct cybersecurity implementation and collecting evidence
• Guide and coach development teams and stakeholders in cybersecurity
• Facilitate estimation for new projects and cybersecurity features
• Analyze system and software architecture and lead cybersecurity feature design for automotive projects
• Oversee software implementation and verification correctness
• Monitor cybersecurity information and manage vulnerabilities
• Act as an assessor and ambassador of cybersecurity practices in the Business Unit
• Explore emerging technologies and industry best practices
• Prepare training programs for development teams
• Support Cybersecurity Managers in creating, adapting, and improving cybersecurity processes for software development in critical environments

• University's Degree in Engineering
• 10-15 years experience in SW Architecture
• 5 years experience in Automotive Cybersecurity Standards (ISO
  21434, ASPICE for Cybersecurity, UNECE WP.29)
• 5 years experience in System Security
• Cybersecurity Standards
• Automotive Industry Standards
• Analytical Thinking
• Results and Solution Orientation
• Threat Modeling, Risk Management, Security Controls
• Cryptography
• Nice to have: CISM, CISSP, or similar certifications
• Nice to have:
  Embedded Security experience
• Nice to have:
  Functional Safety Knowledge
• Nice to have: SW Modeling including UML
• Nice to have:
  Model Development
• Nice to have: AUTOSAR, QNX
• Understanding the dichotomy of Problem Space and Solution Space

Demonstrates extensive experience in Automotive Cybersecurity Standards, including ISO
21434 and ASPICE for Cybersecurity, while effectively analyzing system threats and risks to implement robust cybersecurity measures. Capable of guiding development teams and ensuring compliance with industry standards throughout the software development lifecycle.

• Automotive Cybersecurity Standards
• Threat Modeling
• Risk Management
• Cybersecurity Specifications
• SW Architecture

• Cybersecurity Measures
• Vulnerability Analysis
• Cryptography
• Security Controls
• System Security
• ISO
  21434
• ASPICE for Cybersecurity
• UML
• AUTOSAR
• QNX

• Analytical Thinking
• Results Orientation
• Solution Orientation

• CISM
• CISSP

• Automotive Industry Standards
• Cybersecurity Management
• Emerging Technologies
• Functional Safety Knowledge
• Model Development