Senior Cybersecurity & OTA Engineer

Responsibilities

• Conduct Threat Analysis and Risk Assessment (TARA) for vehicle E/E systems
• Define cybersecurity goals, requirements, and specifications for on-vehicle assets
• Develop and maintain the vehicle cybersecurity management system (CSMS)
• Design and implement OTA update architecture including secure boot and code signing
• Oversee cybersecurity validation and verification activities including penetration testing
• Collaborate with E/E and software teams to integrate cybersecurity controls into vehicle network architecture
• Support functional safety analysis and ensure cybersecurity measures do not compromise safety
• Mentor and provide technical direction for junior engineers

Requirements

• Bachelor of Science in Engineering, Computer Science, or Cybersecurity
• Minimum 5 years of experience in cybersecurity engineering, preferably in automotive or heavy-duty vehicle systems
• Direct experience with TARA, cybersecurity concept development, and lifecycle management
• Experience with vehicle network security for CAN bus and J1939 protocols
• Experience with OTA update systems design, deployment, and validation
• Familiarity with functional safety standards (ISO 26262)
• Familiarity with penetration testing tools like Wireshark or CANoe

Preferred Qualifications

• Experience with cybersecurity standards (ISO 21434)
• Experience in on-vehicle networking and penetration testing
• Knowledge of SAE vehicle communication standards and automotive Ethernet
• Familiarity with industry standards such as UN R155, UN R156, or NIST

About the Company

GILLIG is a leading transit bus manufacturer in the United States, focused on the transition to zero-emission vehicles. Based in California, the company has a long-standing reputation for quality, reliability, and durability in the heavy-duty transit industry.