A Connected Systems Embedded Security Engineer is accountable for driving adequate security designs into connected Electronic Control Units (ECUs) used in GM vehicle electrical architectures. Connected ECUs are primarily those used to provide customers with a feature rich information and entertainment experience. The Connected Systems Embedded Security Engineer will lead in a progressive technical position responsible for supporting the definition and implementation of embedded security technology, requirements, and standards across the connected ECU product portfolio. They are responsible for ensuring the design of connected ECUs conform to security policy, controls and technical requirements. The Connected Systems Embedded Security Engineer is responsible for supporting fact-based technical evaluations and implementations of security technologies, processes and methodologies to meet business requirements to mitigate risk.
Qualifications and Responsibilities:
- Define/maintain security requirements for automotive embedded systems that provide connectivity to external device.
- Coordinate security requirement development with other cross-discipline activities.
- Support the definition of secure End-End communication requirements between back office and vehicle connection points.
- Support internal and external suppliers to implement the security elements for automotive telematics and infotainment systems.
- Support the identification and resolution of product security defects.
- Work with internal and external stakeholders to develop advanced product designs to secure automotive embedded systems and electrical architectures.
- Lead design reviews with suppliers and/or third parties to assess the security posture of connected ECUs. This includes the need to create a Statement of Work(SOW) to outline design review expectations and needs.
- Interface with internal and external stakeholders to define and manage specialized security testing of connected ECUs.
- Support the development and execution of validation plans and procedures, with focus on security of electronic control units and electrical architectures.
- Remain knowledgeable of relevant trends, technologies, and best practices for securing embedded control systems.
- Manage multiple projects with broad scope and high degree of difficulty.
- Support evaluation and recommendation of new security technologies, processes and methodologies.
- Support continuous evaluation of security threats to drive changes that will increase the security of connected ECU designs.
- Support security incident investigations.
- Support the remediation of software development issues, as related to cybersecurity.
- Support ancillary software development projects, as needed.
The policy of General Motors is to extend opportunities to qualified applicants and employees on an equal basis regardless of an individual's age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity/expression or veteran status. Additionally, General Motors is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including individuals with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, email us at Careers.Accommodations@GM.com.In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.
- Working experience of software coding in C, C++, and python.
- Working experience of practices, designs and technologies used to secure embedded systems.
- Working knowledge of common operating systems used in automotive infotainment components, consumer electronics, and mobile devices such as Android, Linux, and QNX.
- Working knowledge of microcontrollers across various embedded computer architectures.
- Understanding of cryptography fundamentals.
- Ability to make decisions and recommendations while taking into account appropriate tradeoffs between conflicting objectives.
- Ability to handle ambiguity and make decisions and recommendations with limited data.
- Strong analytical/problem solving skills.
- Strong interpersonal skills with demonstrated ability to work with diverse/cross-functional teams.
- Effective communicator with strong oral and written presentation skills.
- Bachelor’s Degree in Electrical Engineering, Systems Engineering, Computer Science, Computer Engineering, Computer Information Systems or equivalent experience may also be considered
- Minimum 3-5 years’ experience in security governance, security architecture development and implementation, industry accepted security technologies, and integration of security requirements into architecture components used by systems engineers and developers.
- Demonstrated ability to solve complex technical security problems through appropriate and cost effective application of current technological components.
- Knowledge of major automotive subsystems.
- Knowledge of common automotive communication protocols. (e.g., CAN, FlexRay, MOST, and Ethernet)
- Working knowledge of common telecom and wireless technologies such as 3G, LTE, Wi-Fi, and Bluetooth.
- Knowledge of aspects of design and development of automotive embedded systems, especially of telematics and infotainment systems and their application and integration in vehicle design.
- Knowledge of automotive navigation, audio, video, radio and telephony equipment.
- Knowledge of practices, designs and technologies used to secure embedded systems.
- Understanding of embedded software security vulnerability discovery and analysis.