Ibm Cybersecurity Analyst Jobs in Michigan (NOW HIRING)

Job Summary:
Kyyba Inc is a global company founded in 1998, providing high-quality resources and recruiting services. They are seeking a Lead Cyber Security Engineer to lead the vehicle software execution team, ensuring high-quality execution of software cybersecurity plans through cross-functional collaboration.
Responsibilities:
• In this position the candidate will develop Communications requirements and manage the development, sourcing, and engineering of these solutions.
• Lead the definition of vehicle-level cybersecurity requirements and architecture, addressing in-vehicle networks, ECU communication, secure unlock, diagnostics, OTA, and external connectivity interfaces.
• Lead the definition, review, and deployment of vehicle cybersecurity requirements and standard-compliant engineering work products, including Threat Analysis and Risk Assessment (TARA), in accordance with ISO/SAE 21434, SAE J3061, and NIST SP 800-53.
• Interface across vehicle systems, hardware, and software, manufacturing, and production teams to ensure consistent and compliant implementation of vehicle cybersecurity requirements throughout the product lifecycle.
• Define and lead cybersecurity requirements and validation strategies for embedded ECU authentication mechanisms, considering vehicle-specific attack vectors, threat scenarios, and misuse cases.
• Lead hardware–software security interface definition, validation strategies, and execution to ensure automotive cybersecurity compliance across ECUs, vehicle gateways, and external connectivity interfaces, addressing identified threats, risks, and feature security requirements.
• Analyze tools for results of secure code analyzers, static code analyzers, and other tools to make sure threat and vulnerability information for future architectures are assessed.
• Conduct threat analysis, vulnerability assessments, and risk assessments with software vendors, ECU suppliers/manufacturers and 3rd party engineering services.
• Support RFI/RFQ activities.
• Develop, configure, integrate, and validate hands-on vehicle cybersecurity solutions, including certificate-based ECU unlocking, secure diagnostics access, and secure flashing/firmware update processes.
Qualifications:
Required:
• Bachelor’s degree in engineering Electrical and/or Computer engineering, Electronics Engineering, Information Science.
• Minimum of 5 years’ experience in automotive embedded software development for ECUs, gateways, and in-vehicle networks.
• Minimum of 3 years’ hands-on experience in automotive cybersecurity features, principles, and best practices, including implementation and process creation aligned with ISO/SAE 21434, SAE J3061, and vulnerability management standards.
• Minimum of 2 years’ experience in development, design, and testing of embedded cybersecurity work products, including secure ECU flashing, certificate-based unlock mechanisms, secure boot and hash algorithms, and software security mechanisms for gateway modules and ECUs with internal and external connectivity.
Preferred:
• Bachelors or Master’s degree in Electrical Engineering, Computer Engineering, Electronics Engineering, or Information Science.
• Solid understanding of automotive cybersecurity principles, including threat modeling (TARA), secure communication design, and implementing security requirements across ECUs, gateways, and connected vehicle interfaces.
• Hands-on knowledge of embedded automotive security concepts and technologies, including secure ECU access, secure diagnostics, certificate-based unlock, secure flashing, and secure boot.
• Experience with software work products developed in compliance with ISO-21424 and ASPICE standards.
• Strong knowledge of automotive communication protocols such as CAN, UDS, and automotive Ethernet, with experience applying security mechanisms within vehicle networks.
• Performed vulnerability analyses and TARAs (Threat Analysis and Risk Assessment); knowledge of mitigation techniques for embedded devices; previous penetration testing experience is desirable.
• Proficient in requirements, change, and configuration management tools such as IBM DOORS NG, Polarion, JIRA, Bitbucket, and IBM RTC.
Company:
Kyyba, Inc. Founded in 1998, the company is headquartered in Farmington Hills, USA, with a team of 1001-5000 employees. The company is currently Late Stage.