Cybersecurity Engineer

Cybersecurity Engineer role focused on implementing security and privacy-by-design across Volvo Cars digital products and platforms, reporting to the Head of Information Security.

Responsibilities

• Implement and maintain cybersecurity controls to ensure security and privacy-by-design requirements are met across Volvo Cars digital products and platforms.
• Work with U.S. & Canada and Global partners, including Information Security, Enterprise Architects, Software Engineers, and Project Managers, to support consumer-facing products and services.
• Ensure alignment with the U.S. & Canada and Global Information Security architecture by enforcing compliance across processes, supporting tools, technology, and organizational components.
• Convert security and privacy requirements into product development roadmaps, advocating for standards and methodologies.
• Conduct technical security assessments using static and dynamic testing tools, code reviews, and penetration testing for applications, websites, cloud infrastructure, and relevant hardware and software/services.
• Identify cybersecurity risks, perform threat analysis, and recommend mitigations to reduce attack vectors to acceptable levels before production launch.
• Enforce information security and data privacy requirements tied to regulatory and legal obligations, including GDPR, CPRA, SOX, and PCI compliance.
• Manage assigned cases/incidents to completion on time and serve as an escalation point for departmental support issues.
• Stay current on cybersecurity vulnerabilities, attack methods, and prevention and remediation techniques.
• Promote a “culture of cybersecurity” by leading secure development training and awareness sessions.

Requirements

• Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• 5+ years of proven experience in cybersecurity engineering.
• Relevant certifications required, such as CISSP, CSSLP, SSCP, or GWEB.
• Strong understanding of information security methodology, standards, software methods and procedures, and software programming languages.
• Hands-on experience with secure software development lifecycle tools, including Qualys, SonarQube, Detectify, and GitHub Advanced Security.
• Ability to evaluate security from a holistic perspective, including threat modeling, risk, and vulnerability assessments.
• Effective communication, presentation, and organizational skills.
• Capability to build and maintain relationships with internal and external partners and stakeholders.
• Ability to work efficiently with minimal supervision and address problems in a timely manner.
• Strong personal integrity and ability to maintain confidentiality of sensitive matters related to organizational compliance and ethics programs.

Technologies

• CISSP, CSSLP, SSCP, GWEB
• Qualys, SonarQube, Detectify, GitHub Advanced Security
• GDPR, CPRA, SOX, PCI

Location

• Mahwah, NJ (onsite)

Salary

• USD 118,495 - 154,044 per year
• Compensation determined based on experience, qualifications, internal equity, location, and company guidelines