Penetration Tester Engineer (Automotive)

WHAT TO EXPECT

Cyber Security is a fast paced and dynamic area within the Automotive Industry.

You will be an elemental part of the Product Engineering teams delivering products in a secure way always looking at improving the Cyber Security posture and responding to emergent threats.

As a Cyber Security Penetration Test Engineer, you will be responsible for developing the Cyber Security Penetration test lab, creating and reviewing penetration test scopes, penetration test plans and penetration test report, execute penetration test and support the creation of vulnerabilities and the related CSMS artefacts.

You will support the Product Engineering teams to understand and support you to deliver the penetration test related activities.

Key Accountabilities and Responsibilities:

Manage the delivery of penetration test activities as per CSMS (ISO 21434) according to scope, time, budget and quality and build/review Vulnerability reports.

Create penetration test scopes and plans for ECUs, systems and vehicles and review pen test reports for ECUs, systems and vehicles.

Assess Cyber Security Penetration test scopes and plans for products and run penetration test as per penetration test scope for ECUs, systems and vehicles.

Manage and lead external penetration test suppliers and their activities and maintain and develop pen test scripts and tools for pen test and fuzz test.

Support external penetration test activities for ECUs, systems and vehicles, support Vulnerabilities resolution and VSOC by demonstrating vulnerabilities, attacks, PoCs and support the sign off of the Pen test relevant artefact and type approval activities.

WHAT YOU'LL NEED

You will have knowledge of any Scripting language, including Python, CAPL and others; knowledge of TARA, security concepts and other Cyber security artefacts mentioned in ISO 21434 and of Cyber Security technologies used to protect Embedded systems.

Knowledge of, at least two or more of the automotive technologies: in-vehicle networks, safety critical Embedded software and hardware, low-level debug interfaces for Embedded hardware, complex onboard computers, vehicle connectivity, etc.

Understanding of high integrity systems, and secure software and/or hardware design principles, in an Embedded environment.

Ability to engineer in a way that is demonstrably compliant with standards and technical specifications excellent collaborative skills.

Contract

Freelance/Payroll (No sponsorship)

Start date: ASAP

Duration: 12 months + extension

Location: Gaydon, UK

Conditions: On site

Rate: £35 - £50 per hour