Automotive Cybersecurity Engineer – Software-Defined Vehicles

Vehicles are increasingly defined by software: centralised computing, over-the-air updates and connected services. That makes cybersecurity a core part of vehicle development. Cyber Instincts is building a network of automotive cybersecurity specialists to take on assignments with OEMs and Tier 1 suppliers in the Gothenburg region. If you work with product cybersecurity and want to help shape secure, software-defined vehicles, we’d like to hear from you.

What you could work on

• Threat Analysis and Risk Assessment (TARA) at component, function and vehicle level

• Defining cybersecurity goals, concepts and requirements together with architects and system designers

• Securing software-defined vehicle architectures: central compute, zonal architectures and vehicle-to-cloud connectivity

• Secure boot, secure software updates and OTA, key management and PKI

• Supporting compliance with ISO/SAE 21434, UNECE R155/R156 and type approval

• Supplier cybersecurity reviews and work product assessments

• Vulnerability management and post-production cybersecurity monitoring

What we’re looking for

• Experience in automotive or embedded cybersecurity

• Hands-on experience with TARA and ISO/SAE 21434

• Good understanding of UNECE R155/R156 and CSMS

• Ability to work with architects, developers, suppliers and other stakeholders

• Fluent English. Swedish is a plus.

It’s a plus if you have experience with

• Software-defined vehicles: service-oriented architectures (SOA), AUTOSAR Adaptive, high-performance computers (HPC) and zonal architectures

• Connected vehicles: OTA/SUMS, vehicle-to-cloud security, V2X and telematics

• Embedded security: HSM, secure boot, SecOC, secure diagnostics (UDS 0x27/0x29) and cryptography

• Platforms: AUTOSAR Classic, Linux/QNX and Android Automotive

• Networks: CAN/CAN FD, automotive Ethernet, MACsec and IDS/IDPS

• Secure development: secure software development, DevSecOps, SBOM and supply-chain security

• Testing: security testing and penetration testing of ECUs and vehicle systems

• Related standards: ISO 26262 (functional safety), ISO/SAE 21434 with China GB 44495, and the Cyber Resilience Act (CRA)

What we offer

• Assignments with leading automotive companies in the Gothenburg region

• The choice of employment at Cyber Instincts or working with us as an independent subconsultant

• A small, specialised cybersecurity company with short decision paths and close contact with management

Location: Gothenburg. The setup is hybrid or on-site depending on the assignment.

We review applications continuously, and you are welcome to apply even if we have no matching assignment right now.