Senior Security Risk Assessment Specialist (m/f/d)

At CARIAD, we're bundling and further expanding the Volkswagen Group's software expertise. We're uniting over 6,500 global experts to build a scalable technology stack, including a software platform, unified electronic architecture and reliable connection to the automotive cloud. Our CARIDIANS are developing vehicle functions such as driver assistance systems, a next-generation infotainment platform, power electronics and charging technology, and digital services in and around the vehicle.

Our software can already be found in Volkswagen ID. models and will soon power Audi and Porsche vehicles with the E3 1.2 platform in 2024.

It's no easy task, but with experts like you, we can shape the future of mobility. Join us at CARIAD and be part of this exciting journey!

YOUR TEAM

We are a diverse, cross-functional team who share a passion for security, new technologies, agile working methods and automobiles. Being on the offensive side of security, we don't simply perform classical research on potential security breaches. Instead, we actively develop security technologies, improve security architecture and look for weaknesses in new and existing technological products and solutions, looking for ways to exploit them. In doing so, we ensure the security of our own systems.
Our Mission: »Leading the evolution to the most secure mobility products«

WHAT YOU WILL DO

Bring Security risk evaluation knowledge and awareness into the projects and being first contact person for individual evaluation needs from components, systems and technologies
Support risk assessments of our product, through support, methodological guidance and guidelines
Deliver risk assessments for new automotive products and features so that suitable mitigations and couter measures can be applied
Research and document potential attack vectors and attack paths in complex automotive and mobility architectures
Work closely with Security Owners to find realistic solutions, argumentaiton or mitigation options to make products release ready

WHO YOU ARE

Successfully completed studies in the field of science, software engineering or equivalent
Several years of experience in Threat Analyses and Risk Assessments and respective frameworks especially familiarity with standards and regulations applicable for cars and their ecosystem like ISO 21434, UN R 155 and ISO 27000ff or other equivalent ones
Experience with software/system architecture with proven experience in the fields of end-to-end architectures for embedded environments like automotive, IoT or avionics
Deep technical understanding and proficient knowhow in developing and delivering secure data products in automotive industry based on standards for securing embedded systems, networks, servers, communication protocols and applications
Fluent English and German language skills (oral and written)

NICE TO KNOW