Cyber Security Penetration Test Engineer/Cyber Security Engineer

About the Company

Responsibilities

• ● Manage the delivery of penetration test activities as per CSMS (ISO 21434) according to scope, time, budget and quality and build/ review Vulnerability reports.
• ● Create penetration test scopes and plans for ECUs, systems and vehicles and review pen test reports for ECUs, systems and vehicles.
• ● Assess Cyber Security Penetration test scopes and plans for the products and run penetration test as per penetration test scope for ECUs, systems and vehicles.
• ● Manage and lead external penetration test suppliers and their activities and maintain and develop pen test scripts and tools for pen test and fuzz test.
• ● Support external penetration test activities for ECUs, systems and vehicles, support Vulnerabilities resolution and VSOC by demonstrating vulnerabilities, attacks, PoCs and support the sign off of the Pen test relevant artefact and type approval activities.
• ● You will have knowledge of any scripting language, including Python, CAPL and others; knowledge of TARA, security concepts and other Cyber security artefacts mentioned in ISO 21434 and of Cyber Security technologies used to protect embedded systems.
• ● Knowledge of, at least two or more of the automotive technologies: in-vehicle networks, safety critical embedded software and hardware, low-level debug interfaces for embedded hardware, complex onboard computers, vehicle connectivity, etc.
• ● Understanding of high integrity systems, and secure software and / or hardware design principles, in an embedded environment.
• ● Ability to engineer in a way that is demonstrably compliant with standards and technical specifications excellent collaborative skills.
• ● Lead and support the plant launch of cyber products (key provisioning, SecOC, IPsec, secure logging) across new vehicle programmes
• ● Capture and analyse vehicle, ECU and end-of-line (EOL) logs to identify the root cause of cyber-related build failures
• ● Own issue management end to end: raise, triage, prioritise, track and close issues, with clear status reporting to programme and plant leadership
• ● Implement and verify solutions on affected vehicles (rework, re-provisioning, software or configuration updates) to get them out of the build
• ● Debug on vehicle and on rigs using CANoe, Wireshark and Corvus
• ● Validate fixes and hotfixes at embedded/system level before plant rollout, and confirm effectiveness on the line
• ● Support EOL and plant teams with cyber processes, work instructions and first-line fault diagnosis
• ● Feed lessons learned back into engineering, validation and EOL process design to prevent recurrence
• ● Produce concise issue reports, containment plans and launch readiness updates
• ● Provide on-site cover during critical build phases and launch events
• ● Minimum of a bachelor's degree in an engineering or computer science discipline
• ● Minimum of 2-3 years of related experience in automotive test, validation or launch support
• ● Hands-on experience with Vector CANoe: configuration, execution, trace analysis and CAPL
• ● Experience with Wireshark for Ethernet and network protocol analysis
• ● Experience with Corvus for vehicle/ECU debugging and log capture
• ● Strong debugging and validation skills on ECUs and embedded systems
• ● Knowledge of cyber security fundamentals: key provisioning, SecOC, IPsec and secure logging
• ● Knowledge of CAN, CAN-FD and automotive Ethernet communication, including SOME/IP
• ● Proven issue management skills: structured problem solving, root cause analysis and driving issues to closure
• ● Strong technical, communication and analytical abilities, able to explain issues clearly to plant and non-cyber stakeholders
• ● Ability to work independently on site, under launch time pressure, and as part of a wider team
• ● Full UK driving licence
• ● Willingness to travel frequently to UK plants, including Halewood (Liverpool) and Solihull, with occasional out-of-hours or shift support during launch