Cybersecurity Engineer TARA Specialist

Position Title

Cybersecurity Engineer TARA Specialist

Function / Team

Cybersecurity / EE team

Primary Location

FTCI in India

Role Purpose

To ensure cybersecurity risks are effectively identified, assessed, and managed through TARA and Re-TARA activities.

Experience

4-10 Years

Role Summary:

The TARA Engineer is responsible for conducting and maintaining Threat Analysis and Risk Assessment (TARA) activities for vehicle systems, software, and connected services in accordance with ISO/SAE 21434 and organizational cybersecurity processes. This role supports the identification, evaluation, and treatment of cybersecurity risks throughout the product lifecycle by creating new TARAs and performing Re-TARA assessments triggered by design changes, software updates, vulnerability findings, and regulatory requirements. The position works closely with cross-functional engineering teams to ensure cybersecurity risks are appropriately managed and documented while supporting compliance with UN-R155 and the organization's Cybersecurity Management System (CSMS).

Key Responsibilities

Area

Responsibilities / Expected Outputs

Project Information Collection and Item Identification

• Collect project information from stakeholders and identify in-scope systems, ECUs, and components requiring TARA assessment.
• Create and maintain the assessment item list to ensure complete cybersecurity coverage.

ECU Information Coordination

• Request ECU and system information from responsible engineering teams and stakeholders.
• Follow up as necessary to ensure timely and accurate completion of required information.

Technical Information Review and Consolidation

• Review and validate ECU and system information provided by engineering teams.
• Consolidate technical information required for TARA activities and clarify gaps or inconsistencies with stakeholders.

TARA Development and Database Management

• Perform Threat Analysis and Risk Assessment (TARA) activities in accordance with established methodologies and cybersecurity processes.
• Document assessment results and maintain TARA records within the designated database and tool environment.

Assessment Completion and Stakeholder Communication

• Communicate TARA completion status and assessment results to relevant stakeholders.
• Support project teams by providing assessment outcomes, status updates, and required cybersecurity documentation.

Expected Deliverables

TARA Document

Re-TARA Reports

ECU Information Sheet

Database Registration

Completion Report

Required Knowledge and Skills

Knowledge of Threat Analysis and Risk Assessment (TARA) methodologies and cybersecurity risk assessment principles.

Understanding of ISO/SAE 21434 and automotive cybersecurity engineering processes.

Ability to analyze vehicle systems, ECUs, software, and network architectures from a cybersecurity perspective.

Strong analytical and problem-solving skills with attention to detail.

Effective communication and stakeholder coordination skills.