Cybersecurity Engineer

Select how often (in days) to receive an alert:

Cybersecurity Engineer

Mahwah, NJ (onsite)
At Volvo Cars, we are excited about pushing the boundaries of automotive innovation. Our Information Security Team is dedicated to delivering a safe and secure digital experience to our employees, customers, and retailers located in the U.S. and Canada. We're looking for a Cybersecurity Engineer to join our team.

Position Overview:

In this role, you will report to the Head of Information Security and focus on implementing and maintaining robust cybersecurity measures across our digital products and platforms. Your goal is to ensure our products and services are designed with security and privacy in mind, reducing cyber threats and hacking attempts. If you are passionate about cybersecurity and have the ability to understand complex principles and apply them practically, while presenting concepts or findings to both technical and non-technical audiences, this is an exciting opportunity to make a significant impact.
This role offers an excellent opportunity to work in a fast-paced environment with a diverse team of professionals and a large degree of autonomy. You will have the chance to work with the latest technologies and tools, while also developing step-change improvements in the way we do business.

Key Responsibilities:

• Implement and maintain cybersecurity measures to ensure security and privacy-by-design requirements are met across our digital products and platforms.
• Collaborate with our U.S. & Canada and Global partners (e.g., Information Security, Enterprise Architects, Software Engineers, Project Managers) on the development of consumer-facing products and services.
• Ensure compliance with our U.S & Canada and Global Information Security architecture, processes, supporting tools, technology, and organizational components, making sure compliance criteria align with industry standards.
• Translate security and privacy requirements into product development roadmaps and advocate standards and methodologies.
• Perform technical security assessments, including static and dynamic testing tools, code reviews, and penetration testing of applications, websites, cloud infrastructure, and applicable hardware, software, and services.
• Identify cybersecurity risks, conduct threat analysis, and recommend mitigation strategies with the goal of reducing potential attack vectors to acceptable levels before products are launched into production.
• Enforce information security and data privacy requirements related to our regulatory and legal obligations, such as GDPR, CPRA, SOX, and PCI compliance.
• Resolve and appropriately complete assigned cases/incidents on-time and act as an escalation for departmental support issues.
• Maintain comprehensive knowledge of recent cybersecurity vulnerabilities, attack methods, and prevention and remediation techniques.
• Promote a “culture of cybersecurity” by leading secure development training & awareness sessions.

Qualifications:

• Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• 5+ years of proven experience in cybersecurity engineering.
• Relevant certifications, such as CISSP, CSSLP, SSCP, or GWEB is required.
• Solid understanding of information security methodology, standards, software methods, procedures, and software programming languages.
• Hands-on experience with tools that support the secure software development lifecycle, such as Qualys, Sonar Qube, Detectify, and Github Advanced Security.
• Competence to examine information security from a holistic view, including threat modeling, risk, and vulnerability assessments.
• Effective communication, presentation, and…