Lead Engineer - Software and Cyber Security
MahindraCareerSite · Bangalore, Bangalore-AD, IN · India · On-site
Sign up free: we match you to jobs like this, tailor your application and fill the form. 2 free applications every day.
Responsibilities & Key Deliverables
Position Overview We are looking for an Automotive Cyber Security Testing Lead Engineer – Powertrain ECUs to lead cybersecurity engineering activities for safety-critical powertrain control systems, including ICE, Hybrid, and Electric powertrain ECUs. This role is responsible for ensuring that powertrain functions are verified and validated to protect against cyber threats while complying with global automotive cybersecurity regulations throughout the product lifecycle.
Key Responsibilities • Lead cybersecurity engineering activities for powertrain ECUs (Engine ECU, VCU, MCU, BMS, HCU, OCDC etc.) • Act as cybersecurity technical owner for assigned powertrain programs • Define and review test requirements to verify Cyber security controls (FUZZ and PEN tests) • Define and review secure architecture including secure boot, secure communication, OTA security, and key management • Perform and lead Threat Analysis and Risk Assessment (TARA) as per ISO/SAE 21434 • Define cybersecurity goals, requirements, and mitigations for powertrain systems • Guide secure architecture implementation for all Cyber Security controls like secure boot, secure flashing, secure communication etc. • Ensure cybersecurity alignment with functional safety (ISO 26262) requirements • Support cybersecurity compliance activities for UNECE R155, AIS 189 and R156, AIS 190. • Coordinate cybersecurity activities with system, software, hardware, and validation teams • Lead cybersecurity reviews with Vehicle teams, suppliers, and internal stakeholders • Guide and mentor cybersecurity engineers and review technical deliverables • Support vulnerability management, incident response, and post-SOP cybersecurity activities Powertrain-Specific Cybersecurity Scope • Protection of torque, speed, propulsion, charging and energy management functions • Secure diagnostics and calibration access (UDS) • Secure production and service software updates • Protection against unauthorized software or calibration manipulation
Standards & Compliance • ISO/SAE 21434 – Road Vehicles Cybersecurity Engineering • UNECE R155, AIS 189 – Cybersecurity Management System • UNECE R156, AIS 190 – Software Update Management System
• ISO 26262 – Functional Safety (coordination and alignment)
Experience
• 10–12+ years of experience in automotive embedded or powertrain systems • 3–6+ years of hands-on automotive cybersecurity experience • 2–3+ years of hands-on scripting and automation using languages • Strong understanding of powertrain ECU development lifecycle Technical Skills • Powertrain control systems and real-time embedded software • CAN, CAN-FD, Automotive Ethernet, UDS, and various ECU level interfaces • Cryptography fundamentals, PKI, key management • Secure boot, HSM, secure diagnostics and other Cyber Security Controls • Cybersecurity vulnerability and incident management • OTA/FOTA update security and backend…