(Senior) Test Engineer Cybersecurity - SDV Hub (m/f/d) at CARIAD

• Bachelor's or Master's degree in Cybersecurity, Information Technology, or a related field.
• Proven experience in cybersecurity testing with a focus on automotive systems.
• Familiarity with automotive industry standards and regulations related to cybersecurity.
• Experience with Python and test frameworks (openHTF, Pytest,etc.)
• Experience in using security testing tools and methodologies.
• Strong understanding of network security, cryptography, and secure coding practices.
• Excellent communication and collaboration skills, with the ability to work in a global, cross-functional environment.
• Industry certifications such as Certified Information Systems Security Professional (CISSP) or Offensive Security Certified Professional (OSCP) are a plus.

YOUR TEAM

The software security architecture team at CARIAD focuses on providing guidance and frameworks for software development and integration using a security-by-design approach. They shape both vehicle software security architecture and integration collaborating in cross-functional agile teams across various expertise domains. An integral part of their work involves prioritizing cybersecurity to ensure the security of software solutions in the dynamic digital landscape. The team implements cutting-edge security measures, stays informed about emerging threats, and collaborates with experts to fortify software against potential risks. By incorporating security practices, they contribute to creating a secure foundation for software solutions in the automotive domains.

As a Security Test Engineer within the Software Architecture team, you would be responsible for conducting comprehensive security testing on software systems to identify and rectify vulnerabilities. You would collaborate closely with development teams, employing advanced testing methodologies to ensure the robustness and resilience of CARIAD's software architecture against potential security threats.

WHAT YOU WILL DO

• Conduct comprehensive security testing, including penetration testing, vulnerability assessments, and ethical hacking, to identify and address potential security risks in automotive systems.
• Develop detailed test plans outlining the scope, approach, resources, and schedule for cybersecurity testing activities, aligning with automotive industry standards.
• Select and utilize specialized security testing tools to automate and enhance testing processes, ensuring the robustness of the systems from codebase to reference cars.
• Design automated test systems for security penetration testing through a fuzzing process
• Work closely with software development and homologation teams to understand system architectures, application designs, and potential security implications.
• Ensure that automotive applications and systems comply with established security standards, industry best practices, and regulatory requirements.
• Generate detailed reports highlighting identified vulnerabilities, their potential impact, and provide recommendations for remediation.
• Document testing procedures, methodologies, and findings to contribute to the cybersecurity knowledge base.

• Remote work options
• Temporary work from abroad in selected countries
• Flextime / optional working hours
• Company pension plan
• Annual professional development
• Sabbatical option up to 6 months
• 30 days paid + 10 days unpaid leave
• Possibility for VW Group car leasing