Custom Software Engineer

Custom Software Engineer

Project Role : Custom Software Engineer
Project Role Description : Develop custom software solutions to design, code, and enhance components across systems or applications. Use modern frameworks and agile practices to deliver scalable, high-performing solutions tailored to specific business needs.
Must have skills : Automotive Functional Safety & Security
Good to have skills : NA
Minimum 15 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary

We are seeking a Cybersecurity Domain SME to define and govern ISO/SAE 21434- and UNECE WP.29-aligned validation coverage on dedicated cybersecurity benches. This role owns the mapping of automotive cybersecurity requirements to bench-based validation scenarios, reviews AI-assisted anomaly and log-analysis outputs for security relevance, and ensures the program's Cybersecurity Management System (CSMS) evidence expectations are met for the assigned scope.

Roles & Responsibilities

-Read and interpret TARA (Threat Analysis and Risk Assessment) outputs to derive cybersecurity bench test scope — penetration, fuzz, boundary, and replay test cases — aligned to ISO/SAE 21434 and UNECE WP.29/R155 CSMS expectations.
-Apply Cybersecurity Assurance Level (CAL 1–4) classification to determine test rigour and evidence obligations for each validation scenario.
-Design and review test cases covering automotive attack surfaces — CAN/CAN-FD, Ethernet, UDS, OBD-II, OTA — including UDS diagnostic security testing (seed/key, security access, session management).
-Review vulnerability classification and risk treatment using CVSS adapted for automotive context, and oversee validation approaches for automotive PKI, secure boot, and key management where in scope.
-Own requirements-to-test and TARA-to-test traceability for cybersecurity requirements in Jama Connect and TestRail.
-Support coverage-gap analysis and improvement planning for the cybersecurity domain (untested attack paths vs. TARA alignment), including audit-ready CSMS/type-approval evidence packages.
-Review AI-assisted log analysis, anomaly detection, and defect classification outputs for cybersecurity relevance before action, ensuring alignment to client-approved AI governance.
-Support vulnerability triage, root cause analysis, and severity classification for security-relevant findings, linking findings back to TARA and release context.
-Report cybersecurity coverage status, risk, and mitigation planning in monthly governance reviews.

Professional & Technical Skills

-12+ years of experience in automotive cybersecurity engineering/validation, with hands-on ISO/SAE 21434 full CSMS lifecycle experience (with depth in verification and validation activities) and UNECE R155/R156.
-Expert-level ability to read and interpret TARA outputs to derive test cases, and to apply Cybersecurity Assurance Level (CAL 1–4) classification to test rigor and evidence obligations.
-Strong understanding of automotive attack surfaces — CAN, CAN-FD, Ethernet, UDS, OBD-II, OTA — and vulnerability classification/risk treatment using CVSS adapted for the automotive context.
-Working knowledge of automotive PKI, secure boot, and key management validation approaches.
-Experience with cybersecurity validation across network security, embedded OS (Linux/Android/RTOS), and hardware-adjacent test scenarios.
-Familiarity with vulnerability scanning/assessment methodologies and CVE tracking/change-impact analysis.
-Working knowledge of ASPICE and its interface with the cybersecurity engineering lifecycle.
-Distinct, hands-on toolchain fluency: CANalyzer/CANoe (Vector) for network monitoring, stimulation, and attack test modules Jama Connect for cybersecurity requirements and TARA traceability TestRail for cybersecurity test case and execution management CAPL for CAN/CAN-FD stimulation and diagnostic scripting and Python for fuzz-testing scripts and protocol test utilities (e.g., scapy-based or custom fuzzers).
-Ability to review AI-assisted validation outputs for security correctness.
-Strong documentation skills for client-facing CSMS/audit and type-approval evidence.

Additional Information

-Minimum 15 years of experience in Automotive Cybersecurity Engineering.
-This position is based at our Bengaluru/Pune office (offshore, supporting a US-based onsite counterpart team).
-Bachelor's/Master's degree in Engineering, Computer Science, or Cybersecurity is required.
-ISO/SAE 21434 or equivalent automotive cybersecurity certification preferred