About this role
Responsibilities & Key Deliverables
Responsibilities:
1. Prepare Cybersecurity concept at componenet & vehicle level
2. Prepare component level TARA, identify the gaps and vulneabilities in existing design and suggest remedial measures.
3. Derive cybersecurity requirements & collaborate with ECU owners to implement cybersecurity controls at component and communication network level.
4. Specify test requirements for component level verification & penetration testing, support in vulnerability analysis and security validation activities.
5. Maintain risk register at component level
6. Maintain and update security configurations and monitor compliance with standards (ISO/SAE 21434, AIS 189).
7. Support in establishing proper production control plan for their component.
8. Participate in incident response and root cause analysis for vehicle cybersecurity issues.
9. Support for regional type approval and CSMS certification activities.
Key Deliverables:
1. Develop and maintain detailed documentation on the vehicle's cybersecurity architecture, including design specifications and security protocols.
2. Deliver comprehensive threat models, risk assessments, and vulnerability management reports at vehicle level (onboard and offboard systems)
3. Provide actionable plans and oversee the implementation of security controls such as encryption, authentication, and secure communication protocols at vehicle level along with CFT & suppliers.
4. Support security testing team to obtain findings from penetration testing, vulnerability scanning, and security validation, and provide clear recommendations for addressing identified issues.
Experience
1. Minimum of 2-5 years of experience in automotive cybersecurity, with a focus on connected and autonomous vehicle systems.
2. Experience in designing and deploying secure vehicle architectures with a focus on ECU and in-vehicle networks.
3. Familiarity with automotive industry cybersecurity standards and regulations (e.g., AIS 189, ISO/SAE 21434, UNECE WP.29).
4. Experience in working with multi-disciplinary teams to integrate cybersecurity across vehicle platforms.
5. Commendable knowledge of secure communication protocols (e.g., CAN, Ethernet, LIN, Bluetooth, etc.).
6. Experience in security testing, threat analysis, and vulnerability management for embedded and connected systems.
7. Strong understanding of secure coding practices and tools for automotive environments
Industry Preferred
Automotive OEMs, Tier 1 suppliers, EMC Test Labs
Qualifications
1. Bachelor’s or Master’s degree in Automotive Electronics, Computer Science, Electrical Engineering, Cybersecurity, or a related field.
2. Relevant certifications in cybersecurity (e.g.,Comptia +, ISO 21434) or additional qualifications or specialized training in automotive cybersecurity, IoT security, or embedded systems security shall be considered as a plus
General Requirements
1. Deep understanding of automotive architectures and communication protocols (e.g., AutoSAR, Linux, QNX, CAN, LIN, Ethernet).
2. Proficiency in cybersecurity tools for vulnerability scanning, penetration testing, and threat modeling.
3. Strong knowledge of cryptographic algorithms and their application in automotive systems.
4. Expertise in developing security policies, risk assessments, and secure development lifecycle for vehicle systems.
Our commitment to Diversity, Equity, and Inclusion
At Mahindra and Mahindra Limited, we believe that diversity drives innovation, and inclusion is at the heart of everything we do. We are committed to cultivating a workplace where every individual feels valued, respected, and empowered to thrive.
We are proud to be an Equal Opportunity Employer. All qualified applicants will be considered for employment without regard to age, caste, race, religion, color, ethnic origin, gender identity, nationality, physical or mental disability, medical condition, sexual orientation, educational background, marital or domestic partnership status, pregnancy or childbirth, veteran status, citizenship status, ancestry, financial status, or any other personal characteristic protected by applicable law.
We actively encourage candidates from all backgrounds to apply and bring their unique perspectives to our teams. We are committed to ensuring an accessible and inclusive experience for all applicants.
Together, we rise by embracing differences and building a future that reflects the communities we serve.