Automotive Cybersecurity Manager, DRIVE OS

The Drive OS Automotive Software team is looking for a Cybersecurity Manager to lead all aspects of the secure software engineering lifecycle according to the ISO21434 Cybersecurity Management System for NVIDIA's Drive OS vehicle software platform. You will collaborate with functional safety managers, security architects, software developers and independent assessors to ensure the ground-breaking automotive software solutions that are shaping the connected vehicle industry are meeting a high bar of security compliance. You will work with hardworking and dedicated multi-functional engineering development teams across various vehicle subsystems to integrate their work into our Drive OS platform, while achieving or exceeding all relevant NVIDIA and automotive standards & guidelines. As Drive OS continues to be deployed in adjacent fields like robotics and medical applications, your work will span cybersecurity engineering across different industries. You'll find the work is exciting, thought provoking, and significantly meaningful!

What you’ll be doing:

• Be involved in the process definition and process improvement for various ISO21434 work products such as security analysis, requirements engineering, architectural verification, and development of groundbreaking software stacks for self-driving cars with an opportunity to craft its future.

• Optimize the cybersecurity engineering workflow to ease adoption by engineering teams while improving the benefit to the security of the product.

• Oversee the execution of the secure software development processes to meet the ISO21434 security standard through the management and preparation of cybersecurity plans, concept, manual, case, vulnerability and tool management

• Be responsible for the constructing the cybersecurity arguments for releasing the product by ensuring all cybersecurity risks have been adequately collected and dispositioned.

• Set the expectations for cybersecurity work distribution between NVIDIA, suppliers, partners and customers.

• Work closely with the security architecture team to provide direction and guidance on how to satisfy self-driving automotive security guidelines and requirements

• Mentor teams and developers, promoting guidelines on industry defined and proven security practices

What we need to see:

• Demonstrated experience in achieving compliance to cybersecurity standards and general automotive quality management systems.

• In depth experience in software engineering with a solid understanding of the software development challenges and the difficulties of integrating a secure development lifecycle overlay in a fast paced engineering lifecycle.

• We seek experience with managing the security of open source software such as Linux and Android.

• Has a good foundation of quality processes, dependency between cybersecurity and quality, and the interplay between safety and security

• Background in threat modeling, common software weaknesses, and common attack vectors

• Ability to be a great partner with both suppliers and customers when it comes to cybersecurity work product distribution.

• Familiarity with computer system architectures, SoC fundamentals (e.g., caches, buses, memory controllers, debug), OS architectures, and networking systems (e.g., ethernet, CAN, LIN)

• Effective written and verbal communication skills, ability to work independently, and collaboratively in a cross-functional environment

• MS or Ph.D. degree or equivalent experience in Electrical Engineering, Computer Science, or computer engineering

• We are looking for 10+ years with driving a secure software development lifecycle according to industry standards such as ISO21434, GB44495, and IEC 62443.

Ways to stand out from the crowd:

• Experience with achieving ISO21434 product certification for an automotive software product

• Participation in standardization bodies and contribution to an existing cybersecurity standard.

• Published articles, books or given conference talks about the above topics.