Cyber Security Engineer

About the Position

Cyber Security Engineer

We are seeking a Cyber Security Engineer to join our team in Nanjing, China. In this role, you will lead Threat Analysis and Risk Assessment (TARA) for our projects, design and implement security mechanisms, and ensure compliance with regulatory requirements such as UN R155/R156.

Responsibilities

• Lead the completion of TARA for projects, identify key assets, attack paths, and threat scenarios, and define Cybersecurity Goals and Requirements.
• Guide hardware, software, and system teams in designing and implementing security mechanisms to ensure product compliance with regulatory requirements.
• Establish and maintain the company's network security process, acting as a cross-departmental "security architect" and promoting the "Security by Design" concept.
• Lead TARA analysis for new projects/features, identify key assets, potential attack vectors, and threat scenarios at the ECU/system level, and evaluate their impact level and attack feasibility.
• Define network security objectives and concepts of the product, and refine them into traceable network security requirements.
• Lead the design and implementation of security mechanisms, including Secure Boot, Secure OTA/Diagnostic Update, HSM integration, Secure Debug, and Secure Logging.
• Collaborate with the testing team to develop a network security verification plan, including fuzz testing, penetration testing, and vulnerability scanning.
• Evaluate the network security capabilities of components provided by suppliers and review their security manuals and compliance certificates.
• Cooperate with the company's PSIRT mechanism to conduct impact assessments and response support for newly discovered vulnerabilities or security incidents in existing fleets.

Requirements

• Bachelor's degree or above, major in computer science, information security, electronic engineering, vehicle engineering, automation, or related fields.
• Over 3 years of work experience in network security or information security related to automotive electronics, industrial control, or embedded systems.
• Deep understanding of the ISO/SAE 21434 standard and methodology, familiar with TARA analysis processes and tools.
• Familiarity with UN R155/R156 regulatory requirements and the compliance certification process under the WP.29 framework.
• Proficiency in commonly used communication protocols for vehicles and their security extensions.
• Solid knowledge of embedded systems and understanding of the working principles of HSM and TEE.
• Good English reading ability, good learning ability, communication ability, and teamwork spirit.
• Strong team player with a good character, diligent and dedicated, strong sense of work responsibility, and able to withstand work pressure.

We Offer

• Opportunities for internal promotion and support for learning through mentoring, training, and global opportunities.
• Flexibility, autonomy, and support to maintain a healthy work-life balance.
• An inclusive work environment where people of all backgrounds are respected and valued.
• Benefits like 13th salary, annual bonus, paid vacation, pension plans, personal insurance, and more.

About the Company

Danfoss engineers solutions that increase machine productivity, reduce emissions, lower energy consumption, and enable electrification. Our solutions are used in areas such as refrigeration, air conditioning, heating, power conversion, motor control, industrial machinery, marine, and on- and off-highway equipment. We also provide solutions for data centers, renewable energy, energy storage, heat recovery, and contribute to district energy solutions for cities.

Our innovative engineering dates back to 1933. Danfoss is family-owned and employs over 39,000 people. We create long-term value for our customers in more than 100 countries with a global footprint of around 100 factories.

Ready to Make a Difference?

If this role excites you, we’d love to hear from you! Apply now to start the conversation and learn more about where your career can go with us.