Custom Software Engineer

Project Role : Custom Software Engineer

Project Role Description : Develop custom software solutions to design, code, and enhance components across systems or applications. Use modern frameworks and agile practices to deliver scalable, high-performing solutions tailored to specific business needs.

Must have skills : Automotive Functional Safety & Security

Good to have skills : NA

Minimum 15 Year(s) Of Experience Is Required Educational Qualification : 15 years full time education

Summary We are seeking a Cybersecurity Domain SME to define and govern ISO/SAE 21434- and UNECE WP.29-aligned validation coverage on dedicated cybersecurity benches. This role owns the mapping of automotive cybersecurity requirements to bench-based validation scenarios, reviews AI-assisted anomaly and log-analysis outputs for security relevance, and ensures the program's Cybersecurity Management System (CSMS) evidence expectations are met for the assigned scope. Roles & Responsibilities

• Read and interpret TARA (Threat Analysis and Risk Assessment) outputs to derive cybersecurity bench test scope — penetration, fuzz, boundary, and replay test cases — aligned to ISO/SAE 21434 and UNECE WP.29/R155 CSMS expectations.
• Apply Cybersecurity Assurance Level (CAL 1–4) classification to determine test rigour and evidence obligations for each validation scenario.
• Design and review test cases covering automotive attack surfaces — CAN/CAN-FD, Ethernet, UDS, OBD-II, OTA — including UDS diagnostic security testing (seed/key, security access, session management).
• Review vulnerability classification and risk treatment using CVSS adapted for automotive context, and oversee validation approaches for automotive PKI, secure boot, and key management where in scope.
• Own requirements-to-test and TARA-to-test traceability for cybersecurity requirements in Jama Connect and TestRail.
• Support coverage-gap analysis and improvement planning for the cybersecurity domain (untested attack paths vs. TARA alignment), including audit-ready CSMS/type-approval evidence packages.
• Review AI-assisted log analysis, anomaly detection, and defect classification outputs for cybersecurity relevance before action, ensuring alignment to client-approved AI governance.
• Support vulnerability triage, root cause analysis, and severity classification for security-relevant findings, linking findings back to TARA and release context.
• Report cybersecurity coverage status, risk, and mitigation planning in monthly governance reviews. Professional & Technical Skills
• 12+ years of experience in automotive cybersecurity engineering/validation, with hands-on ISO/SAE 21434 full CSMS lifecycle experience (with depth in verification and validation activities) and UNECE R155/R156.
• Expert-level ability to read and interpret TARA outputs to derive test cases, and to apply Cybersecurity Assurance Level (CAL 1–4) classification to test rigor and evidence obligations.
• Strong understanding of automotive attack surfaces — CAN, CAN-FD, Ethernet, UDS, OBD-II, OTA — and vulnerability classification/risk treatment using CVSS adapted for the automotive context.
• Working knowledge of automotive PKI, secure boot, and key management validation approaches.
• Experience with cybersecurity validation across network security, embedded OS (Linux/Android/RTOS), and hardware-adjacent test scenarios.
• Familiarity with vulnerability scanning/assessment methodologies and CVE tracking/change-impact analysis.
• Working knowledge of ASPICE and its interface with the cybersecurity engineering lifecycle.
• Distinct, hands-on toolchain fluency: CANalyzer/CANoe (Vector) for network monitoring, stimulation, and attack test modules Jama Connect for cybersecurity requirements and TARA traceability TestRail for cybersecurity test case and execution management CAPL for CAN/CAN-FD stimulation and diagnostic scripting and Python for fuzz-testing scripts and protocol test utilities (e.g., scapy-based or custom fuzzers).
• Ability to review AI-assisted validation outputs for security correctness.
• Strong documentation skills for client-facing CSMS/audit and type-approval evidence. Additional Information
• Minimum 15 years of experience in Automotive Cybersecurity Engineering.
• This position is based at our Bengaluru/Pune office (offshore, supporting a US-based onsite counterpart team).
• Bachelor's/Master's degree in Engineering, Computer Science, or Cybersecurity is required.
• ISO/SAE 21434 or equivalent automotive cybersecurity certification preferred