Systems Engineer, Cybersecurity
Job description
About the role
This position centers on automotive electronic control unit security within a specialized hardware cybersecurity team.
Security professionals protect systems, data, and users. They review code, run tests, monitor threats, and respond to incidents. The field spans application security, infrastructure security, and governance. Security work is careful, evidence based, and constantly evolving. Security teams work in a landscape of constant change, with new threats and new rules every year. Most companies invest heavily in training and tooling for their teams.
Key facts
What you'll do
These requirements protect vehicle systems and components against potential threats.
Such interactions align supplier deliverables with vehicle security expectations.
Findings shape risk levels and mitigation priorities for the development work.
Measures such as SecOC and secure onboard communication protect data and commands in transit.
Testing validates that implemented controls function as intended.
Compliance work ensures development processes meet established requirements.
Requirements
The posting states a pay range of $98800 to $118600.
A bachelor's degree in Cybersecurity, Electrical Engineering, Computer Engineering, Computer Science, or a related technical field, or equivalent hands-on project or internship experience is required. This educational background provides foundational knowledge for automotive cybersecurity tasks.
0 to 2 years of professional or academic/internship experience in cybersecurity, embedded systems, or automotive engineering is required. Candidates are expected to apply basic concepts to real-world vehicle systems.
Understanding of embedded systems architecture, microcontrollers, real-time operating systems, and C/C++ programming is required. These competencies enable effective participation in ECU security activities.
Knowledge of automotive communications protocols, such as CAN, CAN-FD, LIN, or Automotive Ethernet, is required. Familiarity with these buses supports secure integration of in-vehicle networks.
Solid understanding of symmetric and asymmetric cryptography, hashing, public key infrastructure, and secure boot mechanisms is required. These concepts are central to implementing ECU protection.
Clear verbal and written communication skills are required to articulate technical requirements to Tier-1 suppliers and cross-functional teams. Effective communication reduces ambiguity in security expectations.
Practical notes
This role may require compliance with automotive cybersecurity standards and related regulatory frameworks.
Typical interview steps
Security interviews usually include a technical assessment, a threat modeling exercise, and behavioral rounds. Candidates may be asked to review a code sample for vulnerabilities or design a secure system. Practical knowledge and clear risk communication are the core skills. Interviewers often ask how you triage and communicate risk. Showing calm judgment under pressure matters as much as technical depth.
Good to know
Work in this field often involves automotive protocols and electronic control units.
Security concepts such as cryptography, secure boot, and threat analysis are commonly applied.
Collaboration with suppliers and cross-functional teams is typical in automotive cybersecurity roles.
Familiarity with frameworks like ISO/SAE 21434 helps in performing risk assessments and compliance activities.
Hands-on experience with debugging tools and verification methods supports effective security testing.
Questions to ask
Worth asking in any interview: how the team measures success, who the role works with daily, what the onboarding looks like, and what the company is trying to achieve this year. Asking what past hires did well is a strong final question. Keep the list short and pick the questions that matter most to you.
Career growth
Security careers grow from analyst or engineer to senior, staff, and leadership roles. Specializations include cloud security, application security, and security operations. Certifications help early; demonstrated impact matters later. Security careers reward specialization and a track record of finding and fixing real issues. Written communication of risk is a core skill at senior levels.