Product Cyber Security and Project Manager

Are you looking for a role where you can use your knowledge of product cybersecurity to make automotive products safer for all people? Would you like to work for a company that provides an innovative work environment, flexible schedules, and ongoing professional development?

Who we are:

LER Tech Force is an industry leader in embedded controls, software, functional safety, and engineering IT talent. For over 20 years LER has been working with customers across North America to meet their engineering resource challenges.

We have a position for an experienced product cybersecurity engineer (NOT IT cyber security) to assist with cyber security for automotive and power generation products to meet emerging regulations and customer expectations.

• Work directly with corporate and business unit (BU) and area business organization (ABO) product cybersecurity engineers and BU/ABO product development teams to define, analyze, design, develop, and support product cybersecurity requirements and processes.
• Identify and manage product cybersecurity risk, including developing, improving, and governing the product cybersecurity framework, processes, and functional excellence to be compliant with the European Cyber Resilience Act (CRA).
• Plan, develop, maintain, and improve product cybersecurity protections and detections through product cybersecurity roadmaps and new product development programs (technology development, product development, and product changes).
• Monitoring and assessing threats, incidents, and product vulnerabilities.
• Responding to, and recovering from, incidents and vulnerabilities.
• Evaluate customer requirements to determine which requirements are met with existing designs, and which are not, and which requirements are common across customers, and which are unique to a single customer.
• For requirements the designs don t yet meet, determine how best to meet those in a system concept considering: the current baseline platform, the associated hardware and software capabilities, constraints, and optimizations for reuse across products.
• Document the component requirements (e.g. electronic control unit, PC/mobile tool, cloud services, etc.) for system concepts and provide technical support to delivery teams in their implementation of those requirements.
• Evaluate designs for compliance with the CRA.
• Create appropriate cyber documentation on products needing to be CRA compliant.
• Provide technical support to engineering teams for ensuring compliance to cyber procedures and standards.
• Conduct Threat Analyses / Risk Assessments for new products, threats, vulnerabilities, and incidents.
• Analyze / reverse engineer cyber incident attack methods.
• Define robustness improvements and concept designs for incidents and vulnerabilities.
• Demonstrate proof of concepts for client cybersecurity protection and detection features.
• Verify and validate cybersecurity features and product capabilities.
• Conduct penetration testing of systems and components.
• Develop, train, track compliance with, and improve cybersecurity processes, standards, and infrastructure.
• Conduct cybersecurity audits of Cummins teams executing product cybersecurity processes and practices.

• Product Cybersecurity experience with CRA, NIST or ISO 21434 or UNECE R155
• Automotive experience and mechanical aptitude
• Power generation
• Familiarity with engines and engine systems strongly preferred
• Project management skills
• Capable of working and communicating effectively cross functionally
• Good communication skills - both verbal and written
• Great collaborator

• Full benefits: medical, dental, 401K match
• Ongoing professional development opportunities
• Flexible Hybrid schedule
• The opportunity to work on industry leading projects

• College, university, or equivalent Bachelor s degree in Engineering or other relevant technical disciplines
• Minimum of 5 years of product development of electronic components (Design team experience)
• Proven experience with embedded systems
• Systems engineer thinking
• Good communicator - written and verbal

Click the Easy Apply button to learn more.

• Seniority level:
  Mid-Senior level
• Employment type:
  
  Full-time
• Job function:
  Information Technology
• Industries: IT Services and IT Consulting, Software Development, and Financial Services