Product Cybersecurity Engineer

Meet The Team: 

This person will sit on the Requirements and Analysis team within the Product Safety and Release organization. The Staff Systems Engineer – Product Cybersecurity will analyze threats and manage cybersecurity risks, derive requirements, coordinate with a multitude of stakeholders and cross-functional actors throughout the cybersecurity ecosystem, and develop the security case for autonomous driving. 

What You'll Do: 

• Collaborate with the IT, Product, Systems & Software Engineering and Safety teams to cover all aspects of the product security lifecycle according to ISO 21434.
• Conduct thorough risk assessments and threat modeling for existing and new products, identifying potential vulnerabilities and proposing mitigation strategies.
• Drive security by design, define requirements for security in implementation, and define requirements for security testing.
• Conduct and coordinate supplier capability assessments related to product cybersecurity and cybersecurity management systems.
• Formalize risk tolerance profile to inform decision making.
• Own the Security Case including definition and tracking of Key Performance Indicators (KPIs).
• Work with internal business partners such as the Safety and Systems and Software Engineering teams to establish alignment on cybersecurity processes and methods. 
• Conduct and support reviews of security artifacts and Audits and Assessments.
• Liaise with external security vendors and partners, managing relationships and ensuring the effective integration of third-party security solutions.
• Define threat intelligence sources and process and methods to monitor hardware and software assets.
• Stay abreast of emerging cybersecurity threats and technologies, and continuously update our security strategies and solutions accordingly.
• Represent Torc at external standards and industry bodies and communicate our product cybersecurity approach.
• Provide expert guidance and leadership to junior cybersecurity team members, fostering a culture of security awareness throughout the organization.

What You’ll Need to Succeed: 

• Degree(s) in Computer Science, Software Engineering, Systems Engineering, Robotics, Electrical Engineering, or a related technical field with relevant experience.
• Master of Science degree with 7+ years of experience or a Bachelor of Science degree and 10+ years of experience 
• Extensive experience with various methodologies for Threat Analysis and Risk Assessment (TARA). 
• Solid understanding of industry standards and best practices related to cybersecurity best practices.   
• Demonstrated experience working according to ISO 21434 and other industry standards for cybersecurity.
• Demonstrated experience working with various partners, customers, 3^rd party service providers in a multitude of activities throughout the cybersecurity ecosystem.
• Systems thinking with underlying engineering knowledge of the complex physical and software systems used in autonomy technologies. 
• Knowledge in the following disciplines: software engineering, networking, electrical and mechanical systems, system components, and artificial intelligence/machine learning. 
• Position requires occasional travel to Torc locations, government locations, etc. 

Bonus Points! 

• Experience in Robo-Taxi or L4 Freight Transportation Projects. 
• Understanding of agile and software development life cycle processes. 
• Certified Automotive Cybersecurity Engineer (CASE from Automotive ISAC) or equivalent.

Perks of Being a Full-time Torc’r

Torc cares about our team members and we strive to provide benefits and resources to support their health, work/life balance, and future. Our culture is collaborative, energetic, and team focused. Torc offers:  

• A competitive compensation package that includes a bonus component and stock options
• 100% paid medical, dental, and vision premiums for full-time employees  
• 401K plan with a 6% employer match
• Flexibility in schedule and generous paid vacation (available immediately after start date)
• Company-wide holiday office closures
• AD+D and Life Insurance