Magna International

Sr. Penetration Test Engineer

Magna Powertrain seeks a Sr. Penetration Test Engineer with 8+ years of experience in automotive cybersecurity testing, ISO 21434/24089 compliance, ECU/Vehicle level penetration testing, fuzz testing, and vulnerability analysis. Must have strong skills in code & protocol-based fuzz testing, reverse engineering, and hardware/firmware analysis.

<div class="jobs-box__html-content jobs-description-content__text t-14 t-normal
 jobs-description-content__text--stretch" id="job-details" tabindex="-1">
 <h2 class="text-heading-large">
 About the job
 </h2>

 <div class="mt4">
 Job Number: 68505 Group: Magna Powertrain Division: MPT India EC Job Type: Permanent/Regular Location: BANGALORE Work Style: About Us We see a future where everyone can live and move without limitations. That’s why we are developing technologies, systems and concepts that make vehicles safer and cleaner, while serving our communities, the planet and, above all, people. Forward. For all. Group Summary Transforming mobility. Making automotive technology that is smarter, cleaner, safer and lighter. That’s what we’re passionate about at Magna Powertrain, and we do it by creating world-class powertrain systems. We are a premier supplier for the global automotive industry with full capabilities in design, development, testing and manufacturing of complex powertrain systems. Our name stands for quality, environmental consciousness, and safety. Innovation is what drives us and we drive innovation. Dream big and create the future of mobility at Magna Powertrain. About The Role The product cybersecurity Testing expert to provide the test reports for the series production, and different test(Pen/fuzz testing) strategy required for Cybersecurity validation in complying with ISO 21434/24089. Your Responsibilities <ul><li> Lead cyber security validation activities in core in compliance with ISO 21434/ 24089 and Magna cyber security testing strategy in collaboration with the program manager. </li><li>Experience in ECU/Vehicle level Penetration testing &amp; able to setup test environment for the same.</li><li>Experience in code &amp; protocol-based Fuzz testing and working experience on the tools used for the same.</li><li>Experience in Attack Surface Identification, Active/Passive Scan etc</li><li>Guide software engineers in vulnerability analysis (static code analysis, known vulnerability analysis) and support tracking cyber security implementation issues based on the vulnerability analysis.</li><li>Experience in Reverse engineering for decoding messages/firmware etc &amp; work experience on the tools for the same.</li><li>Hardware and Firmware Analysis</li><li>Lead fuzz testing activities and related vulnerability management.</li><li>Support penetration testing activities and related vulnerability management.</li><li>Prepare Validation report to submit to the customer with to the point details.</li><li>Create &amp; maintain documents/templates required for each step in the testing activities. </li></ul>
Who We Are Looking For Bachelor’s degree in Computer Engineering/ Systems Engineering/ Electrical Engineering/ Computer Science or equivalent (Master’s preferred) <ul><li> 8-10 years’ of relevant product and or technology experience regarding the Responsibility/ Activities (listed above) for automotive electronics serial development projects (mandatory). </li></ul>
Your Preferred Qualifications <ul><li> Lead cyber security validation activities in core in compliance with ISO 21434/ 24089 and Magna cyber security testing strategy in collaboration with the program manager. </li><li>Experience in ECU/Vehicle level Penetration testing &amp; able to setup test environment for the same.</li><li> Experience in code &amp; protocol-based Fuzz testing and working experience on the tools used for the same.</li><li> Experience in Attack Surface Identification, Active/Passive Scan etc</li><li>Guide software engineers in vulnerability analysis (static code analysis, known vulnerability analysis) and support tracking cyber security implementation issues based on the vulnerability analysis.</li><li>Experience in Reverse engineering for decoding messages/firmware etc &amp; work experience on the tools for the same.</li><li>Hardware and Firmware Analysis</li><li>Lead fuzz testing activities and related vulnerability management.</li><li>Support penetration testing activities and related vulnerability management.</li><li>Prepare Validation report to submit to the customer with to the point details.</li><li>Create &amp; maintain documents/templates required for each step in the testing activities.</li><li>Provide guidance and support in the incident response team.</li><li>Support incident response activities as assigned.</li><li>Support awareness cultivation of incident response in the engineering team. </li><li>Keep close awareness of cyber security incidents in relative industries and report incident when applicable through the incident response process. </li></ul>
What We Offer At Magna, you can expect an engaging and dynamic environment where you can help to develop industry-leading automotive technologies. We invest in our employees, providing them with the support and resources they need to succeed. As a member of our global team, you can expect exciting, varied responsibilities as well as a wide range of development prospects. Because we believe that your career path should be as unique as you are. Site Benefits Details of our benefits package will be provided during the recruitment process. Awareness. Unity. Empowerment. At Magna, we believe that a diverse workforce is critical to our success. That’s why we are proud to be an equal opportunity employer. We hire on the basis of experience and qualifications, and in consideration of job requirements, regardless of, in particular, color, ancestry, religion, gender, origin, sexual orientation, age, citizenship, marital status, disability or gender identity. Magna takes the privacy of your personal information seriously. We discourage you from sending applications via email to comply with GDPR requirements and your local Data Privacy Law.
 </div>
 </div>