Embedded Cybersecurity Engineer

Join Ford to help shape vehicle product development security across embedded and connected systems.

Responsibilities

• Conduct assessments on content supporting Ford product lines
• Provide compliance reviews for features, functions, platforms, and modules under the Ford Cybersecurity engineering process
• Apply relevant global cybersecurity requirements, standards, and regulations, including ISO 21434 / R155
• Translate cybersecurity requirements into product design and development activities, from ideation through testing, with required deliverables
• Review and approve or reject supplier deliverables for alignment with established cybersecurity requirements
• Partner with content owners to drive progression through the development process with security-by-design from inception
• Support robust engineering practices for features, components, and systems, including threat analysis and risk assessment
• Enable adoption of security requirements, security audits, and vehicle ecosystem assessments
• Develop and apply global supplier expertise to meet Ford cyber expectations
• Produce and present risk reviews to management for concerns not mitigated through controls (security governance board, chief engineers, executive leadership, and related roles)
• Support reuse practices included in the CSMS to reduce repeated effort across vehicle programs

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, or related domains, or a combination of education and experience
• 5+ years of experience with embedded, IoT, and/or product systems cybersecurity
• Functional knowledge of cryptographic controls and how to apply them
• Experience with cybersecurity system engineering, development, and testing
• Experience creating and maintaining engineering documentation, including requirements, specifications, and test plans
• Self-starter who can work independently and collaborate with cross-functional teams
• Strong communication and analytical skills

Technologies

• ISO 21434, R155
• MITRE ATT&CK, STRIDE
• CISSP, Security+

Benefits

• Immediate medical, dental, vision, and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care, and more
• Family building benefits including adoption and surrogacy expense reimbursement and fertility treatments
• Vehicle discount program for employees and family members, plus management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• Paid time off and paid holidays, including the week between Christmas and New Year’s Day
• Paid time off plus the option to purchase additional vacation time

Even Better If You Have

• Certification in CISSP or Security+
• Relevant experience with vulnerability assessment management
• Experience performing threat modeling using industry standards such as MITRE ATT&CK or STRIDE

Location: Dearborn, MI (hybrid)

Compensation: USD 85,400 - 166,600 per year