Cyber Security Architect
Design and lead cybersecurity architecture for embedded automotive systems, ensuring compliance with ISO/SAE 21434 and validating security through penetration testing and risk analysis.
- Compensation
- Not disclosed
- Location
- Limburg
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Contract
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Education: Engineering degree (Bachelor/Master) in Computer Science, Information Systems, Mechatronics, Embedded Systems, or equivalent through experience (preferably in the automotive sector; a dedic
- Cryptography: Strong knowledge of cryptographic algorithms and protocols (AES, PKI, CMAC, SHA-256, ECDSA, etc.) and their practical implementation within automotive development environments.
- Microcontrollers & Hardware Security: Strong knowledge of the Infineon AURIX family, its Hardware Security Module (HSM) components, relevant drivers, software stack, security features, and low-level h
- Embedded Software Development: Hands-on experience in automotive embedded software development, especially in low-level software implementation, CPU configuration, and debugging with an advanced analy
- Communication Stacks & Protocols: Practical knowledge of communication stacks across multiple levels, such as CAN, CAN-FD, FlexRay, LIN, Automotive Ethernet (A-Ethernet), XCP, UDS, and low-level proto
- Standards & Reference Frameworks: Working knowledge of reference product standards and customer requirements (e.g., ISO/SAE 21434, ISO 24089, IEC 62443, OWASP, AUTOSAR, and major OEM cybersecurity spe
- Language: Excellent command of English (spoken and written), as this is the primary language for technical communication and documentation.
Nice to have
- Experience in powertrain development, hybrid architectures, or Electric Vehicles (EVs).
- Knowledge of broader automotive industry standards such as ISO 26262 (Functional Safety) and ASPICE (Automotive SPICE).
- Understanding of product cybersecurity processes across the lifecycle (e.g., concern management, release management, mass production).
Full description
- Location: Hasselt | On-site
- Contract Type: Freelance or Permanent Employment
- Work Model: Hybrid
- Start Date: ASAP
Architect Cyber Security for Next-Generation Embedded & Automotive Systems
At Verhaert Consulting, we connect engineering experts with innovative projects that shape the future of smart mobility and high-tech embedded systems. For an advanced automotive technology program focused on cutting-edge electronic control units (ECUs) and electrified vehicle systems, we are looking for an experienced Cyber Security Architect.
In this role, you will take full ownership of the cybersecurity architecture for embedded systems, ensuring robust technical security concepts and full compliance throughout the complete product lifecycle. You will operate at the intersection of embedded software, hardware security, cryptography, and systems engineering, serving as the primary technical cybersecurity authority across multidisciplinary project teams.
Your Mission
As Cyber Security Architect, you will be the technical expert and primary "cybersecurity guru" within your projects. You will guide technical security activities from early concept definition through development, validation, mass production, and end-of-life/decommissioning.
Your responsibilities include:
- Technical Leadership: Providing high-level technical cybersecurity support to cross-functional development teams.
- Work Product Creation & Review: Leading, creating, and reviewing cybersecurity technical work products at the project level (e.g., TARA / Threat Analysis and Risk Assessment, Cybersecurity Concept).
- Lifecycle Requirements Management: Owning, managing, and reviewing relevant cybersecurity requirements throughout the complete project lifecycle (from concept to decommissioning).
- Verification & Validation: Completing requirements reviews, validation reviews, and ensuring full hands-on cybersecurity testing and validation (including Penetration Testing).
- Vulnerability Analysis: Analyzing vulnerabilities and security bugs in embedded systems and low-level software to ensure products remain free of known vulnerabilities during development and production.
- Risk Management: Executing product-security-related risk analyses (covering development, supply chain, technical, and non-technical aspects) while contributing to overall project risk management.
- State-of-the-Art Innovation: Performing analysis to determine potential technical approaches for new and improved state-of-the-art product cybersecurity solutions.