Cyber Security Penetration Test Engineer

At Tata Technologies we make product development dreams a reality by designing, engineering and validating the products of tomorrow for the worlds leading manufacturers. Due to our continued growth we are now recruiting for Cyber Security Penetration Test Engineer to be based at our customer's office in Gaydon.

Our Engineering Research and Development department (ER&D) is a fast growing function within Tata Technologies Limited that is assembled to work on exciting projects globally for multiple customers. It comprises highly specialized engineers across Automotive, Aerospace and Industrial Heavy Machinery.

Scope of Role

Cyber Security is a fast paced and dynamic area within the Automotive Industry. You will be an elemental part of the Product Engineering teams delivering customer products in a secure way always looking at improving the Cyber Security posture and responding to emergent threats.

As a Cyber Security Penetration Test Engineer, you will be responsible for developing the Cyber Security Penetration test lab, creating and reviewing penetration test scopes, penetration test plans and penetration test report, execute penetration test and support the creation of vulnerabilities and the related CSMS artefacts. You will support the Product Engineering teams to understand and support you to deliver the penetration test related activities.

Area of Responsibility

• Manage the delivery of penetration test activities as per CSMS (ISO 21434) according to scope, time, budget and quality and build/ review Vulnerability reports.
• Create penetration test scopes and plans for ECUs, systems and vehicles and review pen test reports for ECUs, systems and vehicles.
• Assess Cyber Security Penetration test scopes and plans for customer products and run penetration test as per penetration test scope for ECUs, systems and vehicles.
• Manage and lead external penetration test suppliers and their activities and maintain and develop pen test scripts and tools for pen test and fuzz test.
• Support external penetration test activities for ECUs, systems and vehicles, support Vulnerabilities resolution and VSOC by demonstrating vulnerabilities, attacks, PoCs and support the sign off of the Pen test relevant artefact and type approval activities.

Knowledge / Experience

• You will have knowledge of any scripting language, including Python, CAPL and others; knowledge of TARA, security concepts and other Cyber security artefacts mentioned in ISO 21434 and of Cyber Security technologies used to protect embedded systems.
• Knowledge of, at least two or more of the automotive technologies: in-vehicle networks, safety critical embedded software and hardware, low-level debug interfaces for embedded hardware, complex onboard computers, vehicle connectivity, etc.
• Understanding of high integrity systems, and secure software and / or hardware design principles, in an embedded environment.
• Ability to engineer in a way that is demonstrably compliant with standards and technical specifications excellent collaborative skills.

In return for bringing your expertise to our business we offer a competitive salary along with excellent benefits including:

• Pension Scheme We match employee contribution up to 5% of salary
• 25 Days Holiday
• Private Health Care
• Tata Jaguar Land Rover Privilege Scheme - up to 20% off new JLR vehicles
• Group Income Protection
• Health Assured Employee Assistance Program
• Group Life Assurance
• Health Shield Private Health Cash Plan

If you are passionate about bringing innovation to the projects you work on and want to join a global company, then this is the place for you.

Tata Technologies: Engineering a better world.

Tata Technologies would like to thank all applicants for their interest, each application will be reviewed against the set criteria for the role. We would like to advise that only candidates under consideration will be contacted. If you do not hear from us within 10 working days following the closing date it will mean that unfortunately your application has not been successful. We will however retain your details for any suitable future opportunities.