Senior Consultant - Automotive Cybersecurity Professional

UL Solutions is hiring a Senior Consultant to lead automotive cybersecurity work across standards, software security activities, and program delivery in a remote United States role.

Responsibilities

• Lead development of ISO/SAE 21434:2021 processes and templates.
• Lead creation of ISO/SAE 21434:2021 work products including:
  • TARA
  • Cybersecurity goal and claims
  • Cybersecurity concept
  • Cybersecurity specification
  • Cybersecurity verification specification
  • Cybersecurity assessment report
  • Cybersecurity validation report
  • Cybersecurity case
• Lead development of ISO/SAE 24089:2023 processes and templates.
• Lead creation of ISO/SAE 24089:2023 work products including:
  • Software Update Infrastructure Management Report
  • Software Update Cybersecurity Risk Analysis Report
  • Software Update Safety and Cybersecurity Risk Analysis Report
  • Software Update Vehicle Function Management Report
• Create processes for UN Regulations No. 155 and 156.
• Apply secure software development practices and coding expertise to guide clients designing, implementing, and verifying software-intensive cybersecurity work products.
• Lead business development activities for client-funded projects, including defining Statements of Work (SOWs), producing budgetary estimates, and submitting full proposals.
• Lead client programs, including major or large-scale engagements, through regular interaction in technical program meetings and project reviews.
• Address client concerns and resolve client issues.
• Provide expert technical leadership and guidance related to functional safety and related technical domains.
• Support strategic business direction with technical and market expertise for management planning and report-out activities.
• Contribute to development of UL technical standards and other relevant standards by participating on standards committees (e.g., ISO, IEC, IEEE, SAE).
• Integrate continuous improvement and a safety culture across the role.

Requirements

• Bachelor degree in Electrical, Electronics, Computer Science, Mechanical, Automotive, Robotics, Software or Mechatronics Engineering; Masters preferred.
• 5+ years experience with ISO 21434, Cybersecurity Management Systems (CSMS), automotive cybersecurity risk management, and continuous cybersecurity activities (incident response, cybersecurity monitoring).
• Software development experience, including hands-on coding, secure software design, and familiarity with software development lifecycle practices for embedded or safety-relevant systems.
• Additional 5+ years experience with security controls at the vehicle level, including:
  • Secure onboard communication
  • Secure boot
  • Network segmentation
  • Secure coding practices
  • Secure architecture practices
• Knowledge of functional safety standards such as ISO 26262 and SOTIF (ISO 21448), including their intersection with cybersecurity engineering.
• Knowledge of the Cybersecurity Resilience Act (CRA).
• Experience with secure automotive topics such as secure vehicle architecture and frameworks, secure development processes (including ASPICE for Cybersecurity, NIST Cybersecurity Framework, ISO 27001, OWASP), security testing for automotive (penetration testing, vulnerability scanning, fuzz testing, DAST/SAST, design review), and software supply chain security (distributed development, vendor security assessments, secure software supply chain risk management).
• Experience with ISO 24089 and Software Update Management Systems (SUMS), including vehicle software update campaigns and securing vehicle infrastructure related to software updates.

Benefits

• Annual bonus compensation with a target payout of 10% of the base salary.
• Health benefits: medical, dental, and vision.
• Wellness benefits covering mental and financial health.
• Retirement savings: 401K.
• Paid time off: vacation 15 days, holiday and personal days totaling 12 days, plus sick time off 72 hours.
• Estimated salary range: $110,000 to $150,000 USD.