Overview
A Contract Product Cybersecurity Engineer is required to support compliance efforts for a UK manufacturer of specialist commercial vehicles under the EU Cyber Resilience Act. The engineer will work within established frameworks to perform threat analysis and risk assessments (TARAs) for various product lines, specifically focusing on cyber resilience for embedded systems. Collaborating closely with client engineering teams during technical workshops, the contractor will ensure adherence to cybersecurity requirements without redesigning existing approaches.
Responsibilities
- Conduct threat analysis and risk assessments (TARAs) to ISO/SAE 21434 for assigned product lines.
- Develop derived, testable, and traceable cybersecurity requirements.
- Facilitate technical workshops with client engineering teams, providing documented outputs.
- Document and present risk treatment decisions and residual risk acceptance.
- Produce assurance-grade documentation for independent quality assessment.
- Contribute to the cybersecurity case for assigned product lines.
Requirements
- Proven experience with at least two completed TARAs to ISO/SAE 21434 that reached production.
- Strong understanding of the assessment structure including threat scenarios and attack feasibility.
- Experience in deriving cybersecurity requirements and working with suppliers on third-party components.
- Ability to facilitate technical discussions with cross-functional engineering teams.
- High proficiency in technical writing suitable for audit and regulatory scrutiny.
- Familiarity with embedded systems, including ECUs and telematics units.