Embedded Cybersecurity Engineer

Join Ford’s cross-functional vehicle cyber security team in Dearborn, MI (hybrid) to embed security-by-design across the vehicle lifecycle.

Responsibilities

• Conduct assessments on content that supports Ford product lines
• Perform compliance reviews for features, functions, platforms, and modules per the Ford cybersecurity engineering process
• Apply relevant global cybersecurity requirements, standards, and regulations including ISO 21434 and R155
• Identify, engineer, and implement cybersecurity requirements into product design and development from ideation through testing, including required deliverables
• Review and approve or reject supplier deliverables for conformance to existing cybersecurity requirements
• Partner with content owners to advance through the development process while maintaining security-by-design from inception
• Ensure robust engineering practices across features, components, and systems including threat analysis, risk assessment, adoption of security requirements, security audits, and vehicle ecosystem assessments
• Develop and apply global supplier expertise to meet cybersecurity expectations
• Produce risk reviews for management when concerns are not mitigated through controls, including governance board, chief engineers, executive leadership, and related roles
• Support the CSMS re-use model to reduce reapplication of work across vehicle programs

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, or a related domain, or a combination of education and experience
• 5+ years of experience with embedded, IoT, and/or product systems cybersecurity
• Functional knowledge of cryptographic controls and strategies for applying them
• Experience with security system engineering, development, and testing
• Experience creating and maintaining engineering documentation such as requirements, specifications, and test plans
• Ability to work independently and collaboratively as a self-starter
• Strong communication and analytical skills

Technologies

• ISO 21434
• R155
• MITRE ATT&CK
• STRIDE
• CISSP
• Security+

Benefits

• Immediate medical, dental, vision, and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, and subsidized backup child care
• Family building benefits including adoption and surrogacy expense reimbursement and fertility treatments
• Vehicle discount program for employees, family members, and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• Generous paid holidays, including the week between Christmas and New Year’s Day
• Paid time off plus the option to purchase additional vacation time

Even Better (May Have)

• CISSP or Security+ certification
• Relevant experience with vulnerability assessment management
• Experience with threat modeling using industry standards such as MITRE ATT&CK or STRIDE

Location: Dearborn, MI (hybrid)

Compensation: USD 85,400 - 166,600 per year