Embedded Cyber Security Engineer

In this role you will drive secure embedded systems across the product lifecycle for marine and automotive domains. You will work within a cross‑functional team to identify and mitigate cyber risks, shaping architectures, requirements, and verification activities. You’ll engage with customers, suppliers, and certification bodies to ensure secure design and implementation. This hands‑on role offers exposure to complex safety‑critical environments and opportunities to influence secure system architecture.

• Permanent opportunity
• Exposure to certification authorities
• Full lifecycle embedded system projects
• Professional development support

• Perform Threat Analysis and Risk Assessments (TARA) and other security analyses to identify and mitigate risks
• Plan, initiate and track cyber security activities, resources, deliverables and lifecycle milestones
• Develop and manage cyber security activities across system, hardware and embedded software engineering disciplines
• Derive cyber security requirements from risk assessments and allocate them across system, hardware and software boundaries
• Review and influence system, hardware and software architectures, including secure communication flows, trust boundaries and attack surfaces
• Coordinate with customers, suppliers, penetration testers, external assessors and certification authorities
• Review Cybersecurity Requirements Specifications, security concepts and architecture documents to identify vulnerabilities across design, integration, testing, production and OTA updates
• Support vulnerability assessments using methods such as Attack Tree Analysis, STRIDE, DREAD, vulnerability scanning, pentesting coordination and fuzz testing

• Significant hands-on experience in cyber security engineering within automotive, marine, industrial, machinery, aviation, aerospace or related sectors
• Engineering experience with hardware and software datasheets, specifications and embedded system architectures
• Strong understanding of embedded systems, E/E hardware, embedded software and system engineering principles
• Ability to assess cyber security risks at architectural level and develop practical mitigation strategies
• Understanding of standards/regulations such as ISO/SAE 21434, UNECE WP.29 R155/R156, IEC 62443, ISO/IEC 27001, DO-326A and ED-202A
• Understanding of MBSE and SysML for describing architectures, secure communications, trust boundaries and state changes
• Ability to derive, manage and trace cyber security requirements while balancing trade-offs and constraints
• Confident communication, negotiation and stakeholder management skills to influence design decisions

• Confident communication
• Negotiation
• Stakeholder management
• Threat Analysis and Risk Assessments (TARA)
• Cyber security engineering for embedded systems
• MBSE and SysML