Senior Cybersecurity & OTA Engineer

As the leading transit bus manufacturer in the United States, GILLIG buses play a critical role in the environmental and social initiatives in communities across our nation. GILLIG is on the forefront in the transition to zero‑emission vehicles and has an unmatched reputation in the industry for quality, reliability, durability, service, and support. From initial design through final assembly, each GILLIG bus is designed and built in Livermore, CA.

GILLIG Engineering is responsible for the development, customization, and configuration of GILLIG's clean technology heavy‑duty transit buses. We are committed to developing the most reliable buses that connect communities, eliminate congestion, and contribute to a greener environment. Our engineers are engaged in designing, analyzing, testing, launching, and problem‑solving across a wide range of technical areas.

We are looking for a Senior Engineer in the CTC team who will be responsible for the overall design, development, and integration of our on‑vehicle cybersecurity and over‑the‑air (OTA) update systems for all future vehicles. You will have direct influence on vehicle electrical systems from concept through to manufacturing launch to field support. This is a hands‑on, on‑site role at our Loveland, CO facility (Colorado Technology Center) and reports to the E/E Systems Engineering Manager.

Vehicle Cybersecurity & Over‑the‑Air Updates

You will apply your skills & experience to provide highly customized, vehicle‑based cybersecurity and OTA update systems through definition of on‑vehicle assets (items), threats, cybersecurity goals, cybersecurity implementations and component selection. Additional consideration for legacy devices and advanced connectivity devices will also play a major factor as the GILLIG Transit Bus is both a heavy‑duty industrial and automotive product. Experience with cybersecurity standards (ISO 21434) and functional safety (ISO 26262) is preferred.

Experience in on‑vehicle networking, OTA updates and penetration testing is a plus.

• Conduct Threat Analysis and Risk Assessment (TARA) for vehicle E/E systems
• Define cybersecurity goals, requirements, and specifications for on‑vehicle assets
• Develop and maintain the vehicle cybersecurity management system (CSMS) and ensure lifecycle compliance
• Design and implement OTA update architecture including secure boot, code signing, version management, rollback mechanisms and update orchestration
• Oversee cybersecurity validation and verification activities including penetration testing and vulnerability assessments
• Collaborate with E/E and software teams to integrate cybersecurity controls into the vehicle network architecture (CAN, Ethernet)
• Support functional safety analysis and ensure cybersecurity measures do not compromise safety
• Collaborate with suppliers to ensure third‑party components and subsystems meet cybersecurity requirements and compliance
• Mentor and provide technical direction for junior engineers on cybersecurity and OTA best practices
• Guide company direction for on‑vehicle cybersecurity goals
• Analyze and provide feedback to customer and industry requirements and standards

• Autonomy: Ability to work independently with review at critical points.
• Technically Minded: Apply industry practices and standards and provide input and advice to other staff members on cybersecurity practices. Exhibit advanced wide‑ranging experience, using in‑depth professional knowledge, acumen, concepts and company objectives to develop and resolve complex cybersecurity challenges.
• Time Management: Work productively with cross‑functional teams to deliver projects on schedule and on budget.
• Communication: Collaborate and teach up, down and across the organization to help raise the skills and knowledge of the GILLIG team. Adapt style to differing audiences and adept at persuasion on complex subjects.
• Complexity: Assignments are broad in scope and highly complex that require outstanding creativity, superior initiative, good judgement, and leadership skills. Work on problems with diverse scope, where analysis of information requires…