Cyber Security Analyst - Threat Modeling

<p><p><b>Description : </b><br/><br/>A skilled Cyber Security Analyst is needed to ensure the security, integrity, and resilience of connected vehicle systems, embedded controllers, and in-vehicle networks.<br/><br/>The ideal candidate will assess vulnerabilities, implement security controls, monitor threats, and ensure compliance with automotive cybersecurity standards and regulations.<br/><br/>This role demands a strong technical understanding of embedded systems, automotive communication protocols, and cyber threat detection.<br/><br/><b>Key Responsibilities : </b><br/><br/>- Perform threat analysis and risk assessment for vehicle systems, ECUs, and connected components.<br/><br/>- Identify, analyze, and mitigate vulnerabilities in embedded automotive systems, networks, and applications.<br/><br/>- Develop and implement security policies, procedures, and best practices in line with ISO/SAE 21434 and UNECE WP.<br/><br/>- Monitor and analyze network traffic to detect anomalies and potential intrusions in CAN, LIN, FlexRay, and Ethernet communications.<br/><br/>- Collaborate with engineering teams to integrate security measures into the V-model development lifecycle.<br/><br/>- Conduct penetration testing and security validation of in-vehicle and backend automotive systems.<br/><br/>- Work with OEMs and Tier-1 suppliers to ensure security compliance across the supply chain.<br/><br/>- Investigate and respond to security incidents, conducting root cause analysis and corrective action planning.<br/><br/>- Stay updated with emerging automotive cybersecurity threats, vulnerabilities, and mitigation techniques.<br/><br/><b>Required Technical Skills : </b><br/><br/>- Strong knowledge of automotive communication protocols (CAN, LIN, FlexRay, Automotive Ethernet).<br/><br/>- Proficiency in threat modeling and risk assessment methodologies (HEAVENS, EVITA, OCTAVE).<br/><br/>- Hands-on experience with penetration testing tools (CANoe, CANalyzer, Wireshark, Scapy, Metasploit).<br/><br/>- Understanding of embedded systems security and firmware/hardware attack vectors.<br/><br/>- Familiarity with Public Key Infrastructure (PKI), secure boot, secure OTA updates, and cryptographic techniques.<br/><br/>- Knowledge of cloud-connected automotive backend security.<br/><br/>- Proficiency in scripting languages like Python or Bash for automation and analysis.<br/><br/><b>Preferred Qualifications : </b><br/><br/>- Bachelors or Masters degree in Computer Science, Information Security, Electronics, or related field.<br/><br/>- Certifications such as CEH, OSCP, CISSP, GIAC, or Automotive Cybersecurity certifications (ex : SAE/ISO).<br/><br/>- Experience with functional safety (ISO 26262) and integration with cybersecurity requirements.<br/><br/>- Exposure to AUTOSAR security modules</p><br/></p> (ref:hirist.tech)