Senior Engineer, Cybersecurity

What to Expect

This role is responsible for delivery of Cyber Security across vehicle product range, contributing to McLaren Cyber Security Management System with particular focus on the right-hand side of the V-cycle. The role is accountable for defining, coordinating, and assuring delivery of cybersecurity validation, ensuring that controls are appropriately tested, evidenced, and released with confidence in line with programme timing, quality, and regulatory expectations.

Working closely with systems, software, integration, and test teams, this role defines validation strategies, aligns test scope and responsibilities, reviews outcomes, supports technical issue resolution, and ensures traceable evidence is available to demonstrate compliance with internal requirements and external regulations and standards including UNECE WP.29 R155, GB 44495 and ISO 21434.

• Cybersecurity Validation Strategy & Planning Define and maintain the validation approach for cybersecurity features and controls across vehicle systems, ensuring appropriate test coverage across component, integration, system, and vehicle levels in line with programme gateways and release milestones.
• Verification Coordination & Delivery Assurance Own and coordinate the delivery of cybersecurity verification activities, including functional, integration, robustness, and penetration testing performed by relevant teams or partners, ensuring results are reviewed, documented, and actioned effectively.
• Requirements Traceability & Evidence Ensure cybersecurity requirements are fully traceable to verification methods, test cases, and results, generating clear evidence to support design maturity, gateway decisions, and regulatory compliance.
• Issue Investigation & Resolution Diagnose and resolve complex cybersecurity validation issues, working with system owners, software teams, suppliers, and test functions to identify root causes, manage corrective actions, and protect programme timing. Contribute to vulnerability management and incident response process where applicable
• Cross-Functional Delivery Support Partner with engineering, integration, and programme teams to ensure cybersecurity validation activities are planned realistically, prioritised appropriately, and aligned with overall vehicle development and release objectives.
• Compliance & Continuous Improvement Support compliance with UNECE WP.29 R155, GB 44495, ISO 21434, and related standards by maintaining robust validation artefacts, improving test methods and processes, and contributing to the continuous improvement of McLaren's cybersecurity V&V capability.

• Extensive experience in automotive cybersecurity engineering, with strong practical knowledge of verification and validation activities across the vehicle development lifecycle.
• Strong understanding of automotive E/E architectures, in-vehicle networks, and cybersecurity mechanisms including secure communication, authentication, key management, and secure diagnostics.
• Hands-on experience defining test strategies, creating verification plans, developing or reviewing test cases, and assessing cybersecurity performance at subsystem, system, and vehicle level.
• Experience investigating test failures, performing root-cause analysis, and coordinating issue resolution across internal teams and external suppliers.
• Working knowledge of cybersecurity standards and regulations including ISO 21434, UNECE WP.29 R155, GB 44495, and supporting evidence expectations within product development and release processes.
• Familiarity with cybersecurity analysis and validation techniques such as threat analysis, attack path assessment, penetration testing support, fuzz testing, and robustness testing.
• Knowledge of cryptographic algorithms, key management systems (KMS), and public key infrastructure (PKI), including certificate signing and management
• Confident working with requirements traceability, defect management, test management, and evidence generation within structured engineering processes.
• Strong communication skills, with the ability to explain technical risks, test outcomes, and delivery implications clearly to both technical and non-technical stakeholders.
• Degree-qualified in engineering, computer science, cybersecurity, or a related discipline.
• Professional certifications in cybersecurity or test-related disciplines would be advantageous.

We offer a wide - ranging benefits package, which includes:

• Structured career development framework
• 25 days holiday, plus bank holiday. Annual buy & sell up to five days
• Enhanced company pension scheme
• Discretionary annual bonus award
• Private medical insurance and health cash plan
• Life assurance benefit
• Ability to apply for a sabbatical of up to one year after only two years service
• Benefits you can adapt to your lifestyle, such as discounted shopping
• Generous parental leave policies
• A range of wellbeing initiatives, such as employee assistance programme and free financial & mortgage advice

No…