About this role
Vehicles are increasingly defined by software: centralised computing, over-the-air updates and connected services. That makes cybersecurity a core part of vehicle development. Cyber Instincts is building a network of automotive cybersecurity specialists to take on assignments with OEMs and Tier 1 suppliers in the Gothenburg region. If you work with product cybersecurity and want to help shape secure, software-defined vehicles, we’d like to hear from you.What you could work onThreat Analysis and Risk Assessment (TARA) at component, function and vehicle levelDefining cybersecurity goals, concepts and requirements together with architects and system designersSecuring software-defined vehicle architectures: central compute, zonal architectures and vehicle-to-cloud connectivitySecure boot, secure software updates and OTA, key management and PKISupporting compliance with ISO/SAE 21434, UNECE R155/R156 and type approvalSupplier cybersecurity reviews and work product assessmentsVulnerability management and post-production cybersecurity monitoringWhat we’re looking forExperience in automotive or embedded cybersecurityHands-on experience with TARA and ISO/SAE 21434Good understanding of UNECE R155/R156 and CSMSAbility to work with architects, developers, suppliers and other stakeholdersFluent English. Swedish is a plus.It’s a plus if you have experience withSoftware-defined vehicles: service-oriented architectures (SOA), AUTOSAR Adaptive, high-performance computers (HPC) and zonal architecturesConnected vehicles: OTA/SUMS, vehicle-to-cloud security, V2X and telematicsEmbedded security: HSM, secure boot, SecOC, secure diagnostics (UDS 0x27/0x29) and cryptographyPlatforms: AUTOSAR Classic, Linux/QNX and Android AutomotiveNetworks: CAN/CAN FD, automotive Ethernet, MACsec and IDS/IDPSSecure development: secure software development, DevSecOps, SBOM and supply-chain securityTesting: security testing and penetration testing of ECUs and vehicle systemsRelated standards: ISO 26262 (functional safety), ISO/SAE 21434 with China GB 44495, and the Cyber Resilience Act (CRA)What we offerAssignments with leading automotive companies in the Gothenburg regionThe choice of employment at Cyber Instincts or working with us as an independent subconsultantA small, specialised cybersecurity company with short decision paths and close contact with managementLocation: Gothenburg. The setup is hybrid or on-site depending on the assignment.We review applications continuously, and you are welcome to apply even if we have no matching assignment right now.