Staff Systems Engineer Cybersecurity

Torc Robotics - Blacksburg, VA

Full-time - Senior

Blacksburg, VA

Professional, Scientific, and Technical Services

About the position

The Staff Product Cybersecurity Architect at Torc is a pivotal role responsible for implementing key cybersecurity measures across the company's product lines. This position requires close collaboration with the Safety and Regulatory team to develop the cybersecurity components of the Torc Safety Case, ensuring that all products meet stringent security standards. The architect will lead subsets of the implementation of the Torc cybersecurity management system, which is essential for maintaining the integrity and security of the autonomous vehicle technology that Torc is known for. In this role, the architect will develop and maintain a comprehensive cybersecurity architecture that aligns with industry standards and business objectives. This includes documenting and leading the implementation of key activities within the cybersecurity management system. The architect will conduct thorough threat analyses and risk assessments for both existing and new products, identifying potential vulnerabilities and proposing effective mitigation strategies. Collaboration with product development teams is crucial to embed security measures into the design and development lifecycle of products, ensuring that security is a foundational aspect from conception through deployment. The Staff Product Cybersecurity Architect will also stay updated on emerging cybersecurity threats and technologies, continuously refining security strategies and solutions. They will oversee the implementation of various security controls, including encryption, access controls, network security, and secure coding practices. Providing expert guidance to cybersecurity team members and fostering a culture of security awareness throughout the organization is a key responsibility. Additionally, the architect will manage relationships with external security vendors and partners, ensuring the effective integration of third-party security solutions. Reporting on security architecture, risk assessments, and mitigation strategies to senior management and stakeholders is also part of the role, along with ensuring compliance with relevant industry and regulatory standards. In the event of a security breach, the architect will participate in incident response and forensic activities, representing Torc at external standards and industry bodies to communicate the company's cybersecurity approach.

Responsibilities

• Develop and maintain a comprehensive cybersecurity architecture for the product ecosystem.
• Document, maintain, and lead the implementation of key activities in the cybersecurity management system.
• Conduct thorough threat analysis and risk assessments for existing and new products, identifying vulnerabilities and proposing mitigation strategies.
• Collaborate with product development teams to embed security into the design and development lifecycle of products.
• Stay abreast of emerging cybersecurity threats and technologies, continuously updating security strategies and solutions.
• Oversee and evaluate the implementation of security controls, including encryption, access controls, network security, and secure coding practices.
• Provide expert guidance to cybersecurity team members, fostering a culture of security awareness throughout the organization.
• Liaise with external security vendors and partners, managing relationships and ensuring effective integration of third-party security solutions.
• Prepare and present reports on security architecture, risk assessments, and mitigation strategies to senior management and relevant stakeholders.
• Ensure compliance with relevant industry, regulatory, and organizational cybersecurity standards and policies.
• Participate in and support incident response and forensic activities in the event of a security breach.
• Represent Torc at external standards and industry bodies and communicate the product cybersecurity approach.

Requirements

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field or equivalent work experience.
• Minimum of 10 years of experience in cybersecurity, with at least 3 years focusing on product security architecture.
• Strong understanding of security protocols, cryptography, authentication, authorization, and security.
• Experience with cloud security, IoT security, and securing embedded systems.
• Proficient in security frameworks and regulations (e.g., ISO 26262, 21434, UNECE R155).
• Excellent communication skills, both written and verbal, with the ability to articulate complex security concepts to a varied audience.
• Leadership skills and the ability to work collaboratively with diverse teams.
• Proven track record of implementing successful cybersecurity solutions in product development.
• Critical/logical thinking to identify problems and provide solutions to ensure efficient, cybersecure self-driving trucks.

Nice-to-haves

• Keen attention to detail to identify problems and processes that don't comply with protocol.
• May travel occasionally.