Automotive Cybersecurity Engineer – Software-Defined Vehicles

Vehicles are increasingly defined by software: centralised computing, over-the-air updates and connected services. That makes cybersecurity a core part of vehicle development. Cyber Instincts is building a network of automotive cybersecurity specialists to take on assignments with OEMs and Tier 1 suppliers in the Gothenburg region. If you work with product cybersecurity and want to help shape secure, software-defined vehicles, we’d like to hear from you. What you could work on Threat Analysis and Risk Assessment (TARA) at component, function and vehicle level Defining cybersecurity goals, concepts and requirements together with architects and system designers Securing software-defined vehicle architectures: central compute, zonal architectures and vehicle-to-cloud connectivity Secure boot, secure software updates and OTA, key management and PKI Supporting compliance with ISO/SAE 21434, UNECE R155/R156 and type approval Supplier cybersecurity reviews and work product assessments Vulnerability management and post-production cybersecurity monitoring What we’re looking for Experience in automotive or embedded cybersecurity Hands-on experience with TARA and ISO/SAE 21434 Good understanding of UNECE R155/R156 and CSMS Ability to work with architects, developers, suppliers and other stakeholders Fluent English. Swedish is a plus. It’s a plus if you have experience with Software-defined vehicles: service-oriented architectures (SOA), AUTOSAR Adaptive, high-performance computers (HPC) and zonal architectures Connected vehicles: OTA/SUMS, vehicle-to-cloud security, V2X and telematics Embedded security: HSM, secure boot, SecOC, secure diagnostics (UDS 0x27/0x29) and cryptography Platforms: AUTOSAR Classic, Linux/QNX and Android Automotive Networks: CAN/CAN FD, automotive Ethernet, MACsec and IDS/IDPS Secure development: secure software development, DevSecOps, SBOM and supply-chain security Testing: security testing and penetration testing of ECUs and vehicle systems Related standards: ISO 26262 (functional safety), ISO/SAE 21434 with China GB 44495, and the Cyber Resilience Act (CRA) What we offer Assignments with leading automotive companies in the Gothenburg region The choice of employment at Cyber Instincts or working with us as an independent subconsultant A small, specialised cybersecurity company with short decision paths and close contact with management Location: Gothenburg. The setup is hybrid or on-site depending on the assignment. We review applications continuously, and you are welcome to apply even if we have no matching assignment right now.