Discipline Engineer

Valeo est une entreprise mondiale de haute technologie qui conçoit des solutions révolutionnaires pour réinventer la mobilité. Nous sommes un équipementier partenaire des constructeurs automobiles et des acteurs de la nouvelle mobilité dans le monde entier. Notre vision ? Inventer une mobilité plus verte et plus sûre, grâce à des solutions axées sur la conduite intuitive et la réduction des émissions de CO2. Nous sommes leaders dans nos domaines d'activité et reconnus comme l'une des plus grandes entreprises innovantes au monde.

RESPONSBILITIES~

• Lifecycle Management~ Execute and document each stage of the Product Security Incident Response Lifecycle, from initial detection of a vulnerability to resolution and formal communication.
• Triage & Risk Assessment~ Conduct technical triage for automotive security incidents and customer-reported issues to determine scope, urgency, and impact on vehicle safety (ISO 26262) and security.
• Real-time Decision Making~ Make swift, informed decisions to mitigate risks, protecting Valeo’s reputation and safeguarding vehicles from active exploits.
• Stakeholder Communication~ Provide clear technical briefings and executive updates to internal engineering teams, legal counsel, OEMs, and regulatory bodies during and after an incident.
• Deep-dive Analysis~ Perform root-cause analysis on affected products, generate forensic reports, and analyze automotive threat landscape trends to improve future product design.
• Plan Development~ Develop and maintain Incident Response Plans tailored to specific electronic control units (ECUs) and vehicle platforms.
• Customer Guidance~ Validate security notifications and provide authoritative guidance to OEMs regarding patch implementation and risk mitigation.

REQUIRED QUALIFICATIONS~

• Minimum 5–6 years of experience in Automotive Product Development or Testing with exposure and knowledge on product cybersecurity.
• Proven experience in Product Cybersecurity, specifically in reviewing Threat Analysis and Risk Assessment (TARA).
• Preferred - hands-on experience in incident response, vulnerability analysis, or product security research.
• Direct experience with security/ vulnerability investigations in embedded systems, IoT, or ECUs.
• Hands-on investigative experience involving automotive communication protocols (e.g., CAN, LIN, Automotive Ethernet).
• Robust understanding of embedded OS (e.g., QNX, Embedded Linux), Hardware Security Modules (HSMs), and basic cryptography applied to vehicle networks.
• Ability to translate complex technical vulnerabilities into actionable executive reports.

PREFERRED QUALIFICATIONS~

• Sound knowledge and familiarity with ISO/SAE 21434 and UN R155/R156 regulations.
• Experience in SAST/DAST methodologies and FOSS (Open Source) security risk analysis.
• Experience handling incidents related to V2X, Telematics, Infotainment (IVI), or Powertrain security.
• Certifications~ eCIR or CEH or OSCP or other Incident Handler certifications are a plus.

Position~ Engineering Disciplines

Département~ Cyber

Schedule~ Temps plein

Employee Status~ CDI

Type de contrat~ Contrat permanent

Job Posting Date~ 2026-07-28 *Join Us ! Being part of our team, you will join~

• one of the largest global innovative companies, with more than 20,000 engineers working in Research & Development
• a multi-cultural environment that values diversity and international collaboration
• more than 100,000 colleagues in 31 countries... which make a lot of opportunity for career growth
• a business highly committed to limiting the environmental impact if its activities and ranked by Corporate Knights as the number one company in the automotive sector in terms of sustainable development More information on Valeo~ https~//www.valeo.com*