Cyber Security Developer

Project description

This opening is for an ADAS Domain Controller project for a prestigious OEM, where Luxoft is working with the OEM teams to deliver a next-generation Platform solution based on AUTOSAR Classic, AUTOSAR Adaptive and QNX working together as a system interacting with a host of cameras, ultrasound sensors, internal and external Radars. Luxoft is collaborating on Signal and Service Management, Diagnostics, SW Update, Vehicle Config, QNX/Middleware and Software Architecture areas with the OEM directly.

Luxoft is expected to delivery quality and expert support in the above areas, drive topics independently, liaise with other OEM stakeholders to remove blockers. The ideal candidate needs to have endless curiosity and can pair a global mindset with locally relevant execution. You should be a gritty problem solver, never give up attitude and a self-starter who can think of out-of-box solution.

The successful candidate will be a team player, display a balance of hard and soft skills, including the ability to respond quickly to Client's changing needs.

• Analyze Cybersecurity requirements, systems and software architectures from a Cybersecurity standpoint and provide guidance for the required implementation.
• Responsible for Threat Analysis, Risk Assessment activities (TARA):
  Impact assessment, asset and threat scenario identification activities, Attack feasibility evaluation, Risk Assessment activities, Cybersecurity threat UN R155 compliance
• Responsible for Item definition activities, Cybersecurity Concept and Cybersecurity Requirements creation and review, Responsible for defining verification and validation criteria for cybersecurity specification
• Responsible for Item definition activities, Cybersecurity Concept and Cybersecurity Requirements creation and review
• Responsible for defining verification and validation criteria for cybersecurity specification
• Supports Vulnerability Management and Cybersecurity Incident Response in technical aspects (CVSS environmental score)
• Analysis of Change Requests impacting security-relevant features.
• Analysis of Defects/Bugs impacting security-relevant features.
• Provide process improvement feedback regarding cybersecurity development processes and deliverables.

• Secure Software Development Life Cycle
• Cryptography and Public Key Infrastructure (PKI)
• Network security protocols (TLS, SOK)
• Knowledge in ASPICE
• Embedded SW Development experience
• Knowledge of Automotive security controls (Secure boot, Secure storage, Secure diagnosis...)
• Degree / Education in electronics or similar fields.
• Experience with Jira and Confluence.
• Good communication & presentation skills.
• Self-organized, dynamic, and motivated.

• Classic AUTOSAR knowledge
• Knowledge of MISRA C:2012 addendum
• Knowledge of ISO 21434:2021