As a Cybersecurity Engineer – Embedded Products, you will play a central role in ensuring the security and compliance of our customers’ vehicle systems and ECU architectures. Your responsibilities include:

• Perform a comprehensive risk assessment of the current system architecture and identify item-level functions by applying the TARA process via recognized methods (e.g., ISO/SAE 21434 TARA, STRIDE, or similar).
• Build and review item definitions, identify critical assets, potential attack vectors, threat scenarios, and evaluate associated risks at both ECU and vehicle levels.
• Derive Cybersecurity Goals and Cybersecurity Requirements (hardware, firmware, and system-level design) from the TARA results and ensure traceability throughout the product development lifecycle.
• Contribute to the Cybersecurity Concept (CSC) and ensure alignment with ISO/SAE 21434 and regulatory requirements.
• Collaborate with system, software, and hardware engineering teams to integrate recommended security measures (cryptography, secure boot, secure communication, key management, hardware root of trust, debug protections, memory protection, key storage and secure update mechanisms).
• Evaluate protocols usage and propose cybersecurity countermeasures such as authentication, encryption, replay protection, secure pairing, and robust key management.
• Support validation activities for cybersecurity controls and participate in audits, reviews, and documentation of findings.
• Support compliance and customer requirements aligned with standards and frameworks (as applicable): CRA, ISO/SAE 21434, RED-DA, IEC 62443, NIST, etc.

• Bachelor’s or Master’s degree in Software, Electrical, Computer, or Automotive Engineering or a related field.
• 3–10 years of experience in automotive cybersecurity or embedded systems cybersecurity, with hands-on experience on TARA based on ISO/SAE 21434 processes.
• Solid foundation in embedded systems architecture, including deep understanding of MCU/SoC design constraints, real-time and Linux-based environments.
• Proficient with boot architectures and low-level debugging using interfaces such as JTAG, XCP and SWD.
• Solid understanding of communication protocols (CAN, CAN-FD, Automotive Ethernet, SOME/IP, UDS, UART, SPI, BT, Wi-Fi, USB, NFC, cellular, RF, etc.), and embedded security mechanisms (cryptography, secure boot, secure communication, key management, hardware root of trust, debug protections, memory protection, key storage and secure update mechanisms).
• Proven ability to define Cybersecurity Goals and claims, derive Requirements, and ensure traceability through the development lifecycle.
• Excellent analytical, problem-solving, and documentation skills.
• Ability to work collaboratively with multi-disciplinary, multi-site engineering teams.

Preferred / Asset Qualifications:

• Experience with embedded systems, or safety-critical ECUs.
• Hands-on experience in cybersecurity validation and testing (fuzzing, robustness testing, penetration testing).
• Knowledge of Cybersecurity Case preparation and internal/external audit processes.
• Familiarity with regulatory requirements such as UNECE R155/R156, CRA and standards such as ISO 21434, IEC 62443.
• Exposure to hardware security modules (TPM, Secure Element, HSM), TrustZone, MPU/MMU
• Understanding of Software Bill of Material (SBOM), product security incident response (PSIRT) processes and vulnerability monitoring and management (CVE/CWE/CVSS).

Please note that only selected candidates and Permanent Residents/Canadian Citizens will be contacted.

Job Types: Full-time, Permanent

CS Group Canada values ​​diversity in the workplace and encourages women, visible minorities, ethnic minorities, aboriginal people, and people with disabilities to apply.

Benefits:

• Hybrid Work 
• Industry leading medical, dental, and vision Insurance
• Access to a telemedicine service
• RRSP program
• Personal and sick days
• Recreation room with pool table and foosball table

All your information will be kept confidential according to EEO guidelines.