Security Architect

The Security Architect who holds essential technical expertise of Cybersecurity will steer the Rolling Wireless products development and process compliance from in terms of all Cybersecurity aspects including the new features evaluation and infrastuctures setup.

The Security Architect is a pivotal role in the System Architecture team of R&D. You will oversee all the aspects of Cybersecurity during the product development whole life cycle at the system architectural level, identify technical weakness in our design, testing and manufacturing process, proactively take initiatives driving new feature studies and improvements, and also support RFI/RFQ responses to help win new customer projects. At the same time, you will also act as the authenticated Cybersecurity expert to lead the ISO/SAE 21434 (or relevant standards) process execution, as well as maintaining security requirements, solutions and tracking of vulnerabilities, incidents, etc.

1. Support projects execution from security perspective as the technical lead:

• Define system functional/non-functional requirements, identify high-level solutions, create system level architecture design, and track implementation for features development and improvement.
• Provide early techical feasibility and effort estimation in project and feature planning.
• Create system architecture and review HW/SW architecture design to ensure all system level considerations are taken into account.
• Align with cross funcitonal teams on system architecture and HW/SW interfaces consistency.
• Review feature implementations to idenfity requirement gaps and address improvements.
• Identify potential new requirements and/or enhancements, drive for implementation with reasonable tradeoff when necessary.
• Keep tracking the evolving technologies and identify differentiations that may contribute to the roadmap for long term evolution.

2. On top of relevant Cybersecurity standards (including UNECE, ISO/SAE, GB/T, etc.) from technical and compliance point of view:

• Identify appropriate solutions to address the requirements from relevant standards and regulations.
• Define the proper process to ensure the standards compliance yet with also execution efficiency and best balance of cost.
• Keep eyes on any possible optimizations to improve the maturity level of Cybersecurity implementation

3.  Support pre-sales activities including RFI/RFQ and customer engagement on technical topics to make sure prompt and accurate responses.

4. Perform hands-on pilot study for new technologies and prototyping of advanced features based on projects need or marketing demands, and drive technical innovations with patents submission.

• BSEE/CS required, MS will be preferred.
• 8+ years’ experience in security related work, preferably in embedded wireless products used especially in automotive industry, with minimum 3 years working at system architectural level.
• Familiar with Automotive cybersecurity related process, standard and regulation, e.g. ISO/SAE 21434. Successful 3rd party assessment or certification experience is a plus.
• Working experience on wireless connectivity including Cellular, WIFI/BT, V2X and NTN technologies is a plus.
• Experience in Automotive telematics or infortainment especially with Qualcomm or MediaTek platforms is a strong plus.
• Knowledge and experience in Automotive processes of ASPICE and ISO26262 is a strong plus.
• CISSP or CCSP certificate is preferred.

1.  Systematic and logical thinking with solid system level understanding of security engineering applied in the embedded HW/SW systems (especially in Automotive industry).

2. Familiarity with Real-time OS, Linux, or Android system from Kernel to user space, and preferably hands-on software programming in C/C++, Python, Perl, JavaScript, Lua, etc.

3. Hands-on experience in at least 6 of the following areas (with 3+ at system architectural level expertise):

• Product security (Secure boot, Secure update, Secure storage, etc.)
• Embedded Linux security (DAC, SMACK, SELinux, AppArmor, IMA, etc.)
• Cryptography algorithms (AES, RSA, ECC, ECDSA, etc.)
• Networking security (TCP/IP, SSH, TLS, Firewall, IPsec, IDS/IPS, VPNs, NAC, etc.)
• Security aspects of Wireless standards (3GPP, WiFi, BT/BLE, V2X, etc.)
• Device management and cloud connectivity (OMA-DM, LWM2M, MQTT, CoAP, etc.)
• Security infrastructures (PKI, HSM, TPM, TZ, SE, Token, etc.)
• HW/SW security hardening technics and best practices
• Security vulnerability management and remediation procedures
• Secure software development lifecycle and secure coding practices
• 
  

5. Strong technical leadership to gear the team and drive for results.

6. Excellent technical communication and documentation skills in English are essential.