Security Test Specialist

Role overview

Security Test Specialist at Bosch Global Software Technologies

Responsibilities

• Perform Threat Analysis and Risk Assessment (TARA) validation and derive security test scenarios based on identified threats and attack vectors.
• Test and verify secure boot, secure flashing, and OTA update mechanisms, ensuring protection against tampering and rollback attacks.
• Perform diagnostic security testing (UDS Security Access – Seed/Key, authentication) and validate protection against unauthorized access.
• Work closely with BSW, ASW, and system teams to ensure cybersecurity requirements traceability from concept to test execution.
• Prepare compliance documentation, test reports, and audit evidence to support OEM cybersecurity certification and regulatory approvals.Strong collaboration and leadership skills with ability to mentor teams technically & drive automation & AI adoption in Test.

Employment details

• Location: Bengaluru (prev. Bangalore) [India]

About the employer

• Bosch Global Software Technologies Private Limited is a 100% owned subsidiary of Robert Bosch GmbH, one of the world's leading global supplier of technology and services, offering end-to-end Engineering, IT and Business Solutions.

Additional role details

• With over 27,000+ associates, it’s the largest software development center of Bosch, outside Germany, indicating that it is the Technology Powerhouse of Bosch in India with a global footprint and presence in the US, Europe and the Asia Pacific region.
• Strong experience in AUTOSAR BSW testing (with sensors camera, video, radar, ultrasonic), including MCAL, ECU Abstraction, OS, and Services layers.
• Hands-on testing of communication protocols – CAN, LIN, Ethernet, FlexRay, and diagnostics (UDS/DoIP).Expertise in test automation using Python, CAPL, and tools like CANoe/CANalyzer.
• Design and execute cybersecurity test strategies in compliance with UN R155 and UN R156 for ECU and vehicle-level validation.
• Conduct penetration testing on automotive systems (ECU, CAN, Ethernet, OTA interfaces) to identify vulnerabilities and validate countermeasures.
• Validate secure communication protocols (e.g., CAN, SOME/IP, DoIP, TLS) including authentication, encryption, and data integrity mechanisms.
• Use security testing tools (e.g., CANoe/CANalyzer, Wireshark, fuzzing tools, penetration frameworks) to automate and enhance test coverage.Analyze vulnerabilities, support root cause analysis, and collaborate with development teams for mitigation and re-validation.
• B.E / B.Tech / ECE / EEE / CS 07 - 10 years