[Hiring] Senior Consultant - Automotive Cybersecurity Professional @UL Solutions

Role Description

UL is seeking a Cybersecurity Expert who will be involved with the cybersecurity work product development for various complex software-intensive systems such as systems for self-driving vehicles, industrial automation, battery and energy storage in both mobile and stationary applications.

The Expert will lead the development and review of work products for clients seeking compliance to standards in cybersecurity and related fields, including ISO 21434, ISO 24089, and other similar standards relevant to product, system, hardware, and software engineering safety lifecycle. The ideal candidate will bring hands-on software development expertise to strengthen secure design, implementation, and verification of software-intensive systems.

Responsibilities

• Lead the development of ISO/SAE 21434:2021 processes and templates.
• Lead the development of ISO/SAE 21434:2021 work products such as:
  • TARA
  • Cybersecurity goal and claims
  • Cybersecurity concept
  • Cybersecurity specification
  • Cybersecurity verification specification
  • Cybersecurity assessment report
  • Cybersecurity validation report
  • Cybersecurity case
• Lead the development of ISO 24089:2023 processes and templates.
• Lead the development of ISO 24089:2023 work products such as:
  • Software Update Infrastructure Management Report
  • Software Update Cybersecurity Risk Analysis Report
  • Software Update Safety and Cybersecurity Risk Analysis Report
  • Software Update Vehicle Function Management Report
• Lead the creation of processes for UN Regulations No. 155 and 156.
• Apply secure software development practices and coding expertise to guide clients in designing, implementing, and verifying software-intensive cybersecurity work products.
• Lead business development activities defining Statements of Work (SOWs), providing budgetary estimates, and submitting full proposals for client-funded projects.
• Leverage industry experience and network to win projects and build the business.
• Lead client programs, including major/large-scale client programs, by interacting regularly with clients in technical program meetings and project reviews.
• Address client concerns and resolve client issues.
• Provide expert technical leadership and guidance to clients in reference to functional safety and related technical fields.
• Contribute to the strategic direction of the business by providing technical and market expertise to management planning and report-out activities.
• Contribute to the development of UL technical standards and other relevant technical standards by direct participation as a member of standards committees.
• Integrate continuous improvement and safety culture in all aspects of the job.

Qualifications

• Required: Bachelor degree in Electrical, Electronics, Computer Science, Mechanical, Automotive, Robotics, Software or Mechatronics Engineering. Masters Preferred.
• Required: 5+ years' experience with ISO 21434, Cybersecurity Management Systems (CSMS), Automotive Cybersecurity Risk Management, Continuous Cybersecurity Activities (Incident Response, Cybersecurity Monitoring).
• Required: Software development experience, including hands-on coding, secure software design, and familiarity with software development lifecycle practices for embedded or safety-relevant systems.
• Preferred: Additional 5+ years' experience with security controls at the vehicle level, secure onboard communication, secure boot, network segmentation, secure coding practices, and secure architecture practices.
• Preferred: Knowledge of functional safety standards such as ISO 26262 and SOTIF (ISO 21448), and their intersection with cybersecurity engineering.
• Preferred: Knowledge of Cybersecurity Resilience Act (CRA).
• Experience with secure automotive topics such as:
  • Secure vehicle architecture and frameworks
  • Secure development processes (ASPICE for Cybersecurity, NIST Cybersecurity Framework, ISO 27001, OWASP)
  • Security testing for automotive: Penetration testing, vulnerability scanning, fuzz testing, dynamic/static application security testing, design review
  • Software supply chain security: Distributed development, vendor security assessments, secure software supply chain risk management
• Experience with ISO 24089, Software Update Management Systems (SUMS), including experience with vehicle software update campaigns and securing vehicle infrastructure related to software updates.

Benefits

• Estimated salary range: $110,000 to $150,000 USD.
• Eligible for annual bonus compensation with a target payout of 10% of the base salary.
• Health benefits including medical, dental, and vision.
• Wellness benefits such as mental and financial health.
• Retirement savings (401K) commensurate with the standard rewards offered in each individual location or country.
• Paid time off including vacation (15 days), holiday and personal days (totaling 12 days), and sick time off (72 hours).