As a Cybersecurity Engineer, you will be responsible for defining, implementing and following up cybersecurity activities for embedded control units and related vehicle functions. Your scope will cover risk analysis, requirements engineering, security concepts and compliance with automotive cybersecurity standards and regulations.
Your main responsibilities will include:
- Conduct and maintain cybersecurity risk analyses for embedded transmission and powertrain systems, using structured methods (e.g. TARA, threat modeling).
- Identify and classify system assets, potential attack vectors, vulnerabilities and associated risks, and propose appropriate mitigation strategies.
- Define cybersecurity objectives and contribute to system‑level and ECU‑level security concepts for electrified driveline components.
- Translate risk analysis results into clear, testable cybersecurity requirements for system, hardware, software and suppliers.
- Ensure proper allocation, traceability and coverage of cybersecurity requirements across the V‑cycle (concept, design, implementation, integration, validation).
- Review system and embedded software architectures to assess security posture and recommend design improvements (segmentation, secure communication, hardening, etc.).
- Specify security mechanisms for in‑vehicle communication, diagnostics, authentication, access control, secure update and data protection.
- Prepare, maintain and review cybersecurity work products at project level (risk analysis reports, security concepts, requirement specifications, compliance evidence).
- Monitor implementation of cybersecurity measures, follow up on open actions, deviations and residual risks, and support risk acceptance decisions.
- Support verification, validation and testing activities related to cybersecurity (test specifications, test reviews, evidence consolidation).
- Review technical documentation and supplier deliverables to ensure alignment with cybersecurity requirements and standards.
- Contribute to the definition and continuous improvement of cybersecurity processes, methods, templates and internal guidelines.
- Collaborate closely with Functional Safety, Systems Engineering and other stakeholders to align safety and security activities and avoid conflicts.
- Communicate cybersecurity topics, risks, trade‑offs and decisions to project managers and technical leaders in a clear and structured way.
Your Profile
- Master’s degree in Computer Science, Information Systems, Electrical Engineering, Mechatronics, Embedded Systems or a related discipline.
- Professional experience in automotive cybersecurity, embedded systems security or product security engineering.
- Hands‑on experience with threat and risk analysis methods (e.g. TARA), security concept definition and security requirements engineering.
- Solid understanding of ISO/SAE 21434 and its application in development projects.
- Familiarity with UNECE Regulation R155 and automotive Cybersecurity Management Systems (CSMS).
- Good knowledge of embedded hardware and software architectures (microcontrollers, ECUs, communication buses, RTOS, etc.).
- Experience in managing cybersecurity requirements, traceability and technical documentation throughout the development lifecycle.
- Ability to translate abstract security risks into concrete, implementable technical requirements for engineering teams.
- Experience working in multidisciplinary, international project environments.
- Strong written and spoken English; additional languages are a plus.
- Strong communication skills, analytical mindset and a structured approach to technical problem‑solving.
Preferred Experience & Skills
- Experience in automotive powertrain, transmission or electric‑vehicle systems.
- Knowledge of standards and frameworks such as ISO 24089 (software update engineering), IEC 62443, OWASP or AUTOSAR (Classic/Adaptive).
- Practical experience with secure boot, secure diagnostics, cryptographic mechanisms, key management or intrusion detection for embedded systems.
- Exposure to cybersecurity testing, vulnerability management or penetration testing in an automotive or embedded context.
- Understanding of OEM cybersecurity requirements and typical supplier/OEM interfaces.
- Experience with requirements management tools (e.g. Polarion, DOORS or similar).
- Familiarity with Automotive SPICE and cybersecurity audits or assessments.
What We Offer
- The opportunity to work on cutting‑edge electrified transmission and e‑mobility projects with high impact on future vehicles.
- A dynamic, international environment within Mantu, with strong technical communities and knowledge‑sharing.
- Career development opportunities, training and certifications in cybersecurity, automotive standards and related domains.
- Competitive compensation package and benefits, aligned with your experience and local market.
Amaris Consulting is proud to be an equal-opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.
#LI-VG1
Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1000 clients across the globe, we have been rolling out solutions in major projects for over a decade – this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We’re focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your steppingstone to cross rivers of change, meet challenges and achieve all your projects with success.
At Amaris, we strive to provide our candidates with the best possible recruitment experience. We like to get to know our candidates, challenge them, and be able to give them proper feedback as quickly as possible. Here's what our recruitment process looks like:
Brief Call: Our process typically begins with a brief virtual/phone conversation to get to know you! The objective? Learn about you, understand your motivations, and make sure we have the right job for you!
Interviews (the average number of interviews is 3 - the number may vary depending on the level of seniority required for the position). During the interviews, you will meet people from our team: your line manager of course, but also other people related to your future role. We will talk in depth about you, your experience, and skills, but also about the position and what will be expected of you. Of course, you will also get to know Amaris: our culture, our roots, our teams, and your career opportunities!
Case study: Depending on the position, we may ask you to take a test. This could be a role play, a technical assessment, a problem-solving scenario, etc.
As you know, every person is different and so is every role in a company. That is why we have to adapt accordingly, and the process may differ slightly at times. However, please know that we always put ourselves in the candidate's shoes to ensure they have the best possible experience.
We look forward to meeting you!
