Cybersecurity Penetration Test Engineer

Job Title: Cyber Security Penetration Test Engineer Location: Gaydon or Warwick, UK With regular travel to manufacturing plants (Halewood, Solihull and others as required) Key Accountabilities and Responsibilities: •Manage the delivery of penetration test activities as per CSMS (ISO 21434) according to scope, time, budget and quality and build/ review Vulnerability reports. •Create penetration test scopes and plans for ECUs, systems and vehicles and review pen test reports for ECUs, systems and vehicles. •Assess Cyber Security Penetration test scopes and plans for the products and run penetration test as per penetration test scope for ECUs, systems and vehicles. •Manage and lead external penetration test suppliers and their activities and maintain and develop pen test scripts and tools for pen test and fuzz test. •Support external penetration test activities for ECUs, systems and vehicles, support Vulnerabilities resolution and VSOC by demonstrating vulnerabilities, attacks, PoCs and support the sign off of the Pen test relevant artefact and type approval activities. WHAT YOU’LL NEED •You will have knowledge of any scripting language, including Python, CAPL and others; knowledge of TARA, security concepts and other Cyber security artefacts mentioned in ISO 21434 and of Cyber Security technologies used to protect embedded systems. •Knowledge of, at least two or more of the automotive technologies: in-vehicle networks, safety critical embedded software and hardware, low-level debug interfaces for embedded hardware, complex onboard computers, vehicle connectivity, etc. •Understanding of high integrity systems, and secure software and / or hardware design principles, in an embedded environment. •Ability to engineer in a way that is demonstrably compliant with standards and technical specifications excellent collaborative skills. Job Title: Cyber Security Engineer (Plant Operations) Location: Gaydon, UK. With regular travel to manufacturing plants (Halewood, Solihull and others as required) KEY RESPONSIBILITIES Lead and support the plant launch of cyber products (key provisioning, SecOC, IPsec, secure logging) across new vehicle programmesCapture and analyse vehicle, ECU and end-of-line (EOL) logs to identify the root cause of cyber-related build failuresOwn issue management end to end: raise, triage, prioritise, track and close issues, with clear status reporting to programme and plant leadershipImplement and verify solutions on affected vehicles (rework, re-provisioning, software or configuration updates) to get them out of the buildDebug on vehicle and on rigs using CANoe, Wireshark and CorvusValidate fixes and hotfixes at embedded/system level before plant rollout, and confirm effectiveness on the lineSupport EOL and plant teams with cyber processes, work instructions and first-line fault diagnosisFeed lessons learned back into engineering, validation and EOL process design to prevent recurrenceProduce concise issue reports, containment plans and launch readiness updatesProvide on-site cover during critical build phases and launch events WHAT YOU'LL NEED Basic: Minimum of a bachelor’s degree in an engineering or computer science disciplineMinimum of 2-3 years of related experience in automotive test, validation or launch supportHands-on experience with Vector CANoe: configuration, execution, trace analysis and CAPLExperience with Wireshark for Ethernet and network protocol analysisExperience with Corvus for vehicle/ECU debugging and log captureStrong debugging and validation skills on ECUs and embedded systemsKnowledge of cyber security fundamentals: key provisioning, SecOC, IPsec and secure loggingKnowledge of CAN, CAN-FD and automotive Ethernet communication, including SOME/IPProven issue management skills: structured problem solving, root cause analysis and driving issues to closureStrong technical, communication and analytical abilities, able to explain issues clearly to plant and non-cyber stakeholdersAbility to work independently on site, under launch time pressure, and as part of a wider teamFull UK driving licenceWillingness to travel frequently to UK plants, including Halewood (Liverpool) and Solihull, with occasional out-of-hours or shift support during launch