Product Cybersecurity Engineer
Job description
About the role
May Mobility is on a mission to innovate urban transportation by utilizing autonomous technology, aiming to create safer, more sustainable, and accessible environments. As a Product Cybersecurity Engineer, you will play a vital role in embedding security measures throughout the entire product development process, from initial design to deployment and ongoing operations.
Key facts
What you'll do
- Incorporate security practices such as threat modeling and architecture reviews into the product development process.
- Provide early-stage security insights on hardware, firmware, and software design, considering third-party and supply chain risks.
- Develop, review, and validate security requirements across both hardware and software domains, enforcing secure coding practices and conducting security analyses on primary compute systems.
- Maintain Software Bill of Materials (SBOM) and Hardware Bill of Materials (HBOM) using specialized tools to ensure visibility of components, track vulnerabilities, and enhance supply chain transparency.
- Collaborate with safety, systems, and software teams to apply security considerations during safety and functional assessments.
- Assist in proactive vulnerability management and support secure update strategies using product security tools for threat modeling and risk assessment.
- Conduct hazard and threat analyses (TARA/HARA) early in the architecture and development phases.
- Evaluate and strengthen the security architecture of vehicle subsystems and autonomous technology stacks, defining security requirements at both system and product levels.
- Support senior engineers with Ethernet, in-vehicle networking, and cloud interface configurations, including port security and network segmentation.
- Stay informed about R155/156, ISO 21434, and UL 4600 standards; assist with internal audits, risk assessments, and compliance documentation.
- Engage with Auto-ISAC to monitor emerging threats, attack vectors, and industry best practices.
- Work collaboratively with cybersecurity, hardware, and product engineering teams to provide architectural security design feedback.
- Help promote a security-first culture within the organization through integrated best practices and awareness initiatives.
- Perform additional tasks as assigned by your manager.
Requirements
- Bachelor's degree in Computer Science, Computer Engineering, or a related field.
- 1 to 3 years of experience in product cybersecurity or a similar role.
- Experience with threat modeling and analyzing attack surfaces.
- Proficient in generating and managing Software Bills of Materials (SBOMs) using industry-standard tools, with knowledge of SBOM formats like SPDX and CycloneDX.
- Familiarity with vehicle communication networks and protocols (CAN, LIN, Ethernet, DBCs), embedded systems, and module security technologies.
- Understanding of security services in ISO 14229-1 (UDS).
- Experience with TARA and HARA methodologies; knowledge of UNECE WP.29, ISO/SAE 21434, and other security standards.
- Strong communication skills to convey findings and collaborate effectively with engineering teams for timely remediation.
Nice to have
- Experience in automotive product security at an OEM, Tier 1 supplier, or autonomous vehicle company.
- Familiarity with autonomous vehicle systems and components.
- Knowledge of AUTOSAR security modules, secure boot implementations, and automotive/embedded penetration testing tools (e.g., CANalyzer, Wireshark, JTAG debugging).
- Hands-on experience in penetration testing to identify and exploit vulnerabilities across systems, applications, and devices.
Skills & tools
- Strong written communication skills.
- Attention to detail and a systematic approach to security analysis.
- Ability to identify complex security issues across hardware, firmware, and software and develop innovative solutions that span organizational boundaries.
Practical notes
- Minimal travel required (1%-10%).
- Comprehensive benefits package including health, dental, and vision insurance, retirement plans, and flexible vacation policies.
- May Mobility is committed to diversity and encourages applicants from all backgrounds to apply, even if they do not meet every qualification.
Salary Range
$100,000 - $155,000 USD
May Mobility is an equal opportunity employer. All applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity or expression, veteran status, genetics, or any other legally protected basis.
About the company
May Mobility is transforming cities through autonomous technology to create a safer, greener, more accessible world. Based in Ann Arbor, Michigan, May develops and deploys autonomous vehicles (AVs) powered by our innovative Multi-Policy Decision Making (MPDM) technology that literally reimagines the way AVs think.