Senior Cybersecurity & OTA Engineer

POSITION TITLE:
Senior Cybersecurity & OTA Engineer

LOCATON:
Loveland CO

COMPENSATION: $150,000–$180,000 base (+ performance-based bonus and benefits)

Korn Ferry has partnered with our client, one of the leading U.S. transit bus manufacturers, playing a critical role in the national transition to zero-emission vehicles.

This role will be responsible for the overall design, development, and integration of our on-vehicle cybersecurity and over-the-air (OTA) update systems for all future vehicles. You will have direct influence on vehicle electrical systems from concept through to manufacturing launch to field support.

You will be part of the team that develops the industry’s best-in‑class zero emission bus. You will focus on item definitions, cybersecurity concepts, threat assessments, cybersecurity goals, component selection, component compliance, cybersecurity lifecycle management and OTA infrastructure.

This is a hands‑on Engineering role, located on-site at the Colorado Technology Center (CTC) in Loveland, CO, reporting to the E/E Systems Engineering Manager.

• Conduct Threat Analysis and Risk Assessment (TARA) for vehicle E/E systems
• Define cybersecurity goals, requirements, and specifications for on-vehicle assets
• Develop and maintain the vehicle cybersecurity management system (CSMS) and ensure lifecycle compliance
• Design and implement OTA update architecture including secure boot, code signing, version management, rollback mechanisms and update orchestration
• Oversee cybersecurity validation and verification activities including penetration testing and vulnerability assessments
• Collaborate with E/E and software teams to integrate cybersecurity controls into the vehicle network architecture (CAN, Ethernet)
• Support functional safety analysis and ensure cybersecurity measures do not compromise safety
• Collaborate with suppliers to ensure third‑party components and subsystems meet cybersecurity requirements and compliance
• Mentor and provide technical direction for junior engineers on cybersecurity and OTA best practices
• Guide company direction for on-vehicle cybersecurity goals
• Analyze and provide feedback to customer and industry requirements and standards

• Autonomy:
  Ability to work independently with review at critical points.
• Technically Minded:
  Apply industry practices and standards and provide input and advice to other staff members on cybersecurity practices. Exhibit advanced wide-ranging experience, using in-depth professional knowledge, acumen, concepts and company objectives to develop and resolve complex cybersecurity challenges.
• Time Management:
  Work productively with cross‑functional teams to deliver projects on schedule and on budget.
• Communication:
  Collaborate and teach up, down and across the organization to help raise the skills and knowledge of the team. Adapt style to differing audiences and adept at persuasion on complex subjects.
• Complexity:
  Assignments are broad in scope and highly complex that require outstanding creativity, superior initiative, good judgment, and leadership skills. Work on problems with diverse scope, where analysis of information requires evaluation of identifiable factors. Devise solutions based on limited information and precedent and adapt existing approaches to resolve issues. Use evaluation, judgment, and interpretation to select the right course of action.
• Quality & Standards:
  Cybersecurity documentation, threat models, and risk assessments are accurate and complete. Released designs meet all cybersecurity objectives, compliance requirements, & customer specifications.

• Bachelor of Science (BS) in Engineering, Computer Science, or Cybersecurity.
• 5+ years experience in cybersecurity engineering (preferably in automotive, commercial, or heavy‑duty vehicle systems.)

• Threat analysis and risk assessment (TARA), cybersecurity concept development, and cybersecurity lifecycle management
• Vehicle network security for CAN bus and J1939 protocols
• OTA update systems design, deployment, and validation including secure boot, firmware signing, and delta update strategies

• Heavy‑duty vehicle E/E architectures and connected vehicle ecosystems.
• Functional safety standards (ISO 26262) and their interaction with cybersecurity requirements.
• Experience with cybersecurity standards (ISO 21434) is preferred.
• Experience in on-vehicle networking, OTA updates and penetration testing is a plus.