Principal Product Cybersecurity Assurance Engineer

What you'll do

• Lead security engineers and define product security requirements, architecture guidance, and assurance strategy across product teams.
• Maintain cybersecurity documentation, conduct risk reviews, and support compliance and certification activities.
• Establish incident response and fleet monitoring processes, and represent security in customer, partner, and bid engagements.

What they ask for

• Hands-on experience with ISO 27001/27004/27005 and the NIST Risk Management Framework applied to regulated hardware or embedded products.
• Experience owning security risk management for highly regulated, safety-critical products, with a background in automotive, commercial vehicles, or industrial automation.
• Working knowledge of IEC 62443 and ability to adapt ISO/SAE 21434 lifecycle methods to robotic or electromechanical products.
• Understanding of engineering development lifecycles and product cybersecurity’s relationship to systems engineering, functional safety, and hardware/software co-development.

Nice to have

• TARA or equivalent threat modelling methods, such as STRIDE or PASTA, for embedded or OT/IT systems.
• Experience with secure-by-design AI/ML systems, product security incident response, or cybersecurity for CAN bus, Ethernet, or wireless interfaces.

Tools

ISO 27001/27004/27005, NIST Risk Management Framework (RMF), IEC 62443, ISO/SAE 21434, STRIDE, PASTA, CAN bus, Ethernet

AI focus

Securing AI/ML-enabled robotic systems, including inference pipelines, model integrity, and cloud-to-edge communications.