Sr. Product Cybersecurity Engineer

Polaris - Wyoming, MN

Full-time - Mid Level

Wyoming, MN

501-1,000 employees

Motor Vehicle and Parts Dealers

About the position

The Sr. Product Cybersecurity Engineer at Polaris Industries is responsible for developing and implementing cybersecurity strategies for connected vehicles. This role involves designing in-vehicle cybersecurity architecture, conducting threat analysis, managing key management systems, and ensuring compliance with cybersecurity regulations. The engineer will collaborate with various teams to enhance the security of Polaris' products and contribute to the overall cybersecurity culture within the organization.

Responsibilities

• Support the Chief Cybersecurity Engineer in developing and implementing Polaris' product cybersecurity strategy and roadmap.
• Provide guidance to stakeholders on security concerns and recommended controls.
• Execute threat analysis and risk assessment on vehicle and system levels, mitigating identified risks with appropriate cybersecurity controls.
• Develop, refine, and review cybersecurity requirements and gain approval from the Chief Cybersecurity Engineer.
• Perform design reviews over internal and external cybersecurity solutions, mitigating weaknesses throughout the product lifecycle.
• Define in-vehicle cybersecurity architectures and develop cybersecurity controls such as secure boot and secure reprogramming.
• Manage key management systems and support supplier usage of Polaris PKI system.
• Collaborate with teams to ensure a robust connected ecosystem cybersecurity.
• Support triage and prioritization of vulnerabilities identified during verification and validation phases.
• Support institutionalization of ISO/SAE 21434 processes and produce compliant work products.
• Support regulatory compliance initiatives and supply chain integrity and security initiatives.
• Promote cybersecurity culture by providing training to team members.

Requirements

• Bachelor's degree in computer science, computer engineering, software engineering, electrical engineering, IT security, or relevant domains.
• 5+ years of experience in automotive cybersecurity, embedded system security, IoT security, or cyber-physical system security.
• Experience with securing wireless communication protocols such as cellular, Wi-Fi, and Bluetooth.
• Experience with managing KMS, PKI, CA, and certificate/key generation.
• Experience with conducting threat analysis and risk assessment.
• Experience with developing cybersecurity goals and requirement specifications.
• Experience with designing cybersecurity controls like secure boot and security access.
• Experience with SELinux, App Armor, Hypervisor, TEE, and HSM.
• Excellent written and verbal communication skills.

Nice-to-haves

• Advanced degree in cybersecurity.
• 10+ years of experience in automotive product cybersecurity.
• Experience with symmetric and asymmetric cryptography and digital signatures.
• Experience with developing telematics or infotainment systems.
• Experience with implementing ISO/SAE 21434 processes.
• Understanding of cybersecurity regulations and standards.
• Experience with CAN, CAN-FD, J1939, Ethernet, and USB.
• Understanding of embedded RTOS and Linux-based operating systems.
• Experience with reporting and managing security issues in tools like Jira.
• Experience with modern programming languages such as C, C++, Python, or Java.

Benefits

• Competitive compensation including a profit-sharing plan.
• Employee Stock Ownership Plan and discounted stock purchase plan.
• Generous matching contribution to 401(k).
• Health, dental, and vision insurance.
• Wellness programs and gym reimbursement.
• Paid time off and volunteer time off.
• Life insurance and disability offerings.