Automotive Cybersecurity Engineer – Software-Defined Vehicles

Vehicles are increasingly defined by software: centralised computing, over-the-air updates and connected services. That makes cybersecurity a core part of vehicle development. Cyber Instincts is building a network of automotive cybersecurity specialists to take on assignments with OEMs and Tier 1 suppliers in the Gothenburg region. If you work with product cybersecurity and want to help shape secure, software-defined vehicles, we’d like to hear from you. What you could work on

• Threat Analysis and Risk Assessment (TARA) at component, function and vehicle level
• Defining cybersecurity goals, concepts and requirements together with architects and system designers
• Securing software-defined vehicle architectures: central compute, zonal architectures and vehicle-to-cloud connectivity
• Secure boot, secure software updates and OTA, key management and PKI
• Supporting compliance with ISO/SAE 21434, UNECE R155/R156 and type approval
• Supplier cybersecurity reviews and work product assessments
• Vulnerability management and post-production cybersecurity monitoring

What we’re looking for

• Experience in automotive or embedded cybersecurity
• Hands-on experience with TARA and ISO/SAE 21434
• Good understanding of UNECE R155/R156 and CSMS
• Ability to work with architects, developers, suppliers and other stakeholders
• Fluent English. Swedish is a plus.

It’s a plus if you have experience with

• Software-defined vehicles: service-oriented architectures (SOA), AUTOSAR Adaptive, high-performance computers (HPC) and zonal architectures
• Connected vehicles: OTA/SUMS, vehicle-to-cloud security, V2X and telematics
• Embedded security: HSM, secure boot, SecOC, secure diagnostics (UDS 0x27/0x29) and cryptography
• Platforms: AUTOSAR Classic, Linux/QNX and Android Automotive
• Networks: CAN/CAN FD, automotive Ethernet, MACsec and IDS/IDPS
• Secure development: secure software development, DevSecOps, SBOM and supply-chain security
• Testing: security testing and penetration testing of ECUs and vehicle systems
• Related standards: ISO 26262 (functional safety), ISO/SAE 21434 with China GB 44495, and the Cyber Resilience Act (CRA)

What we offer

• Assignments with leading automotive companies in the Gothenburg region
• The choice of employment at Cyber Instincts or working with us as an independent subconsultant
• A small, specialised cybersecurity company with short decision paths and close contact with management

Location: Gothenburg. The setup is hybrid or on-site depending on the assignment. We review applications continuously, and you are welcome to apply even if we have no matching assignment right now.