Senior Cybersecurity Engineer

About Steerai

Role Overview

Automotive Cybersecurity (Iso And Sae 21434)

• Own the cybersecurity engineering plan and ensure delivery of key work products across the lifecycle, consistent with ISO/SAE 21434 expectations.
• Lead cross-functional cybersecurity governance.
• Own security work products, completeness, and audit readiness.
• Threat Analysis and Risk Assessment (TARA) and Cybersecurity Concept
• Lead TARA at item/system level.
• Develop and maintain the Cybersecurity Concept and allocate requirements into a Technical Cybersecurity Concept.
• Secure Architecture for Vehicle, Backend, and Operations
• Lead security architecture reviews for E/E systems and connected services.
• Define security requirements for remote functions, including abuse case coverage and resilience strategies.
• Drive practical trade-offs: latency/availability vs. integrity controls, constrained ECU compute, real-world service/maintenance constraints, and manufacturability.

Security Verification, Validation, and Assurance

• Define cybersecurity verification strategy and acceptance criteria.
• Lead security issue triage with engineering judgment.

Csms And Type Approval Readiness (Un R155)

• Own the engineering interface to CSMS expectations.
• Establish operational cybersecurity practices.
• Secure Updates and Release Governance (UN R156 / ISO 24089)
• Lead secure software update governance and engineering alignment with SUMS expectations (UN R156) and software update engineering processes (ISO 24089), including update risk assessment, package integrity/authenticity, deployment controls, rollback strategy, and traceability.

Supplier And Ecosystem Security

• Flow down cybersecurity requirements to suppliers, review their security cases, manage interface threats across ECUs/sensors/actuators/TCU/cloud, and ensure evidence is usable for program sign-off and audits.

Qualifications

• Bachelor’s or Master’s degree in

Computer And Electrical And Software Engineering, Systems Engineering, Cybersecurity

• , or similar.
• **8+ years**
• in embedded/automotive cybersecurity or security engineering for safety-/mission-critical systems
• Demonstrated experience applying

Iso And Sae 21434

• on at least one real development program (OEM or Tier-1), including TARA, concept/requirements, and validation evidence.
• Strong understanding of

Un R155 Csms

• expectations and how to build audit-ready evidence and supplier alignment.
• Proven ability to lead security architecture for ECUs and connected systems (vehicle networks, diagnostics, OTA, cloud/mobile integration).
• Hands-on security judgment: threat modeling depth, realistic attack feasibility reasoning, cryptography fundamentals, and practical hardening/testing methods.
• Nice to Have:
• Experience implementing or assessing secure update engineering aligned with UN R156 / ISO 24089 (secure OTA design, governance, and evidence).
• Experience with HSMs, PKI, secure provisioning, and manufacturing key injection flows.
• Experience aligning cybersecurity with functional safety where security threats can create safety-relevant hazardous behavior (safety/security co-engineering).

What We Offer