Principal Engineer - Automotive Cyber Security

Job Summary

Software Engineer for Embedded Security is responsible for the architecture, design, development, integration, and validation of security solutions across Android and Embedded Linux platforms. This role provides technical leadership and strategic direction for platform security, focusing on Software Security, Secure Boot, Trusted Execution Environments (TEE), Secure Storage, Key Management, and compliance with automotive cybersecurity standards. The position collaborates closely with OEMs, SoC vendors, security teams, and cross-functional stakeholders to deliver robust and secure automotive platforms.

What You Will Do

• Architect, design, develop, and integrate embedded security solutions for Android and Embedded Linux platforms.
• Own and maintain security components across Rich OS and Secure World environments.
• Implement, optimize, and troubleshoot Android security features including Keystore/Keystore2, SELinux, Android Verified Boot (AVB), and security-related system services.
• Develop and harden Embedded Linux security solutions, including Secure Boot, kernel security configurations, and Linux Security Modules (LSMs).
• Integrate, validate, and support TrustZone/TEE solutions using GlobalPlatform standards and APIs.
• Enable secure storage solutions such as RPMB, Secure File Systems (SFS), and hardware-backed key storage.
• Drive key provisioning, cryptographic services, encryption, certificate management, and key lifecycle management.
• Support OTP memory access and security-critical OEM-specific configurations such as ECU identifiers.
• Lead security testing, vulnerability assessments, production build validation, and system stabilization activities.
• Collaborate with SoC vendors, TEE vendors, OEMs, and cross-functional teams to resolve complex security challenges.
• Ensure compliance with automotive cybersecurity standards, customer requirements, and internal security specifications.
• Define and drive the security architecture, technical roadmap, and strategic direction for Android and Embedded Linux platforms.
• Lead technical reviews, architecture discussions, security risk assessments, and design decision governance across programs.
• Mentor and guide engineering teams on security best practices, implementation strategies, and advanced troubleshooting techniques.
• Act as the primary technical interface for customers, OEMs, suppliers, and cybersecurity stakeholders.
• Drive root cause analysis and resolution of complex security issues spanning bootloader, kernel, framework, middleware, and TEE layers.
• Lead cybersecurity compliance initiatives, including TARA, security audits, customer assessments, and regulatory compliance activities.

What You Need to be Successful

• Proven experience in automotive embedded systems and platform security.
• Strong understanding of ISO/SAE 21434 and automotive cybersecurity processes.
• Experience working with OEMs, Tier-1 suppliers, SoC vendors, and ecosystem partners.
• In-depth knowledge of GlobalPlatform specifications and TEE architectures.
• Experience with production, signed, and secure software release processes.
• Strong understanding of cryptography, PKI, certificate management, and security architecture principles.
• Excellent analytical, problem-solving, and debugging capabilities.
• Proven experience leading technical teams and driving architecture decisions in embedded software projects.
• Ability to influence stakeholders and align multiple organizations on technical direction.
• Strong communication and collaboration skills with cross-functional and geographically distributed teams.
• High ownership, accountability, and attention to detail.

What is Nice to Have

• Experience with Qualcomm, NXP, Renesas, or similar automotive SoCs.
• Hands-on experience with OP-TEE, QTEE, or commercial TEE implementations.
• Knowledge of hardware security technologies including HSM, TPM, Secure Elements, and cryptographic accelerators.
• Experience in vulnerability management, CVE assessment, and security patch integration.
• Familiarity with Android Automotive OS (AAOS) and AOSP security architecture.
• Experience with penetration testing, threat modeling, and security assessment tools.
• Knowledge of automotive communication protocols such as CAN, Ethernet, UDS, and SOME/IP from a cybersecurity perspective.
• Experience with CI/CD pipelines and automation for security validation, compliance, and release management.
• Understanding of secure OTA update mechanisms and software signing infrastructure.
• Experience leading globally distributed engineering teams and customer-facing technical engagements.

What Makes You Eligible

• Bachelors or Masters degree in Computer Science, Electronics, Electrical Engineering, Cybersecurity, or a related field.
• 10+ years of experience in Embedded Linux, Android Security, Automotive Cybersecurity, or a related domain, with demonstrated technical leadership experience.
• Strong programming skills in C/C++ and scripting languages such as Python or Shell.
• Extensive experience with Linux kernel, Android framework, BSPs, device drivers, bootloaders, and platform integration.
• Hands-on experience with Secure Boot, TEE integration, cryptographic services, key management, and secure storage solutions.
• Proficiency with debugging and development tools such as GDB, JTAG, ADB, and Linux tracing utilities.
• Experience with Git, Gerrit, and collaborative software development workflows.
• Ability to thrive in a fast-paced product development environment.
• Strong communication and stakeholder management skills, with the ability to work effectively across global teams and external partners.
• Proven track record of leading complex security programs and delivering production automotive platforms.
• Experience presenting technical solutions, security architectures, and strategic recommendations to senior leadership, customers, and external stakeholders.