Volvo Cars AB is hiring a Cybersecurity Engineer to help strengthen security and privacy across Volvo Cars digital products and platforms. Reporting to the Head of Information Security, you will implement and maintain cybersecurity measures with a security and privacy-by-design approach, while partnering across teams in the U.S. & Canada and globally to support consumer-facing services.
This onsite role is based in Mahwah, NJ and offers $118,495 to $154,044 per year. Compensation is based on experience, qualifications, internal equity, location, and company guidelines.
Responsibilities
- Implement and maintain cybersecurity controls to meet security and privacy-by-design requirements across digital products and platforms.
- Work closely with U.S. & Canada and Global partners, including Information Security, Enterprise Architects, Software Engineers, and Project Managers.
- Ensure alignment with the company’s U.S. & Canada and Global Information Security architecture by supporting processes, tools, technology, and organizational components.
- Translate security and privacy requirements into product development roadmaps and advocate for relevant standards and methodologies.
- Conduct technical security assessments using static and dynamic testing tools, perform code reviews, and support penetration testing for applications, websites, cloud infrastructure, and applicable hardware, software, and services.
- Identify cybersecurity risks, perform threat analysis, and recommend mitigations to reduce attack vectors to acceptable levels before launch into production.
- Enforce information security and data privacy requirements tied to regulatory and legal obligations, including GDPR, CPRA, SOX, and PCI compliance.
- Resolve assigned cases and incidents on time, and act as an escalation point for departmental support issues.
- Stay current on cybersecurity vulnerabilities, attack methods, and prevention and remediation techniques.
- Promote a culture of cybersecurity by leading secure development training and awareness sessions.
Requirements
- Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science, or a related field.
- 5+ years of proven cybersecurity engineering experience.
- Relevant certifications, such as CISSP, CSSLP, SSCP, or GWEB (required).
- Strong understanding of information security methodology, standards, software methods and procedures, and software programming languages.
- Hands-on experience with tools supporting the secure software development lifecycle, including Qualys, SonarQube, Detectify, and Github Advanced Security.
- Ability to assess information security holistically, including threat modeling, risk, and vulnerability assessments.
- Effective communication, presentation, and organizational skills.
- Ability to build and maintain relationships with internal and external partners and stakeholders.
- Capability to work efficiently with minimal supervision, and to identify and resolve problems in a timely manner.
- Strong personal integrity and ability to maintain confidentiality of sensitive matters related to the organization’s compliance and ethics programs.
Relevant Technologies
CISSP, CSSLP, SSCP, GWEB, Qualys, SonarQube, Detectify, Github Advanced Security, and regulatory frameworks including GDPR, CPRA, SOX, PCI.
