Automotive Cybersecurity Analyst

<p>Experience (in years): 6+ Years relevant experience in the field of Automotive Electronics product development and 1+ Years in Cyber Security implementation and testing</p><p>Keywords: System Architecture, OTA/FOTA Software Update, Security components (SecOC, CSM), Public key infrastructure (PKI), Key management, Digital certificates and digital signatures, Crypto material knowledge of Keys, random number generations, GPS, CAN, UDS, Vehicle Diagnostic, Security fundamentals - authentication, authorization, and symmetric, asymmetric cryptography, HSM, SHE modules.</p><p>Product Experience & Technical Expertise:</p><p> • Good to understand cryptography & PKI technology - Hash, Symmetric / Asymmetric encryption | RSA-X509, SSL, TLS/DTLS, PKCS, key management, certificate implementation</p><p> • Experience in firmware reverse engineering and device security hardening</p><p> • Knowledge of system development and handling of crypto material knowledge of Keys, random number generation.</p><p> • Security fundamentals - authentication, authorization, and symmetric, asymmetric cryptography, HSM, SHE modules.</p><p> • Knowledge & hands on CERT C guidelines.</p><p> • Understanding on Functional Safety activities ((ISO-26262:2, Part-3, Part-4, Part-5, and Part 6)/UN-155)</p><p> • Basic understanding of AUTOSAR security components like SecOC, CSM, CDD</p><p> • Strong software and Hardware debugging skills, shall be able to Communicate and problem solve.</p><p> • Understanding of Device identity and integrity controls - On-Board/Off-Board key generation,</p><p>secure boot, code signing, OTA/FOTA Software Update, device life-cycle management (enrollment, provisioning, activation, suspend, revoke, re-provision/terminate)</p><p> • Understanding of Vulnerability Analysis and Penetration testing of TCP/IP supported Automotive and embedded products.</p><p> • Understanding of secure libraries (e.g. bootloader etc.), Embedded Linux and RTOS</p><p> • Familiarity with device security concepts such as Secure boot (using HSM, SHE, TPM, TEE etc.)</p><p> • Good understanding of automotive electrical architecture & diagnostic protocols. (UDS, OBD, KWP)</p><p> • Comfortable in reading electronics component datasheets, hardware schematics.</p><p> • Understanding in executing vehicle level cyber security attacks - Grey box testing (Command injection, data corruption, back doors, Man in the middle attack, sensor manipulation, network overloading/etc.)</p><p> • Understanding of Data and system security - application whitelisting, run-time system integrity check,</p><p>anomaly detection, message signing, dynamic access control.</p><p> • Experience on Application Lifecycle Management (ALM) tools for ensuring SW quality is desirable.</p><p> • Knowledge of Model based system engineering will be good add-on.</p><p>Role and Responsibilities:</p><p> • Secure algorithm and key concepts implementation</p><p> • Code Reviews</p><p> • Perform basic functional testing</p><p> • Updated Knowledge of Automotive cybersecurity guidelines / standards like ISO SAE 21434</p><p>Behavioral Competencies:</p><p> • Strategic Thinking – Envisioning future, creativity and systems thinking.</p><p> • Passion for innovation – Out of box thinking</p><p> • Emotional connect, - ownership & accountability and drive for results.</p><p> • Demonstrated ability to work with diverse/cross-functional teams.</p>