Cybersecurity Engineer

glydways

Remote

Posted Nov 22, 2024

Other
Engineering

Apply on company site

Job description

Who we are:

Glydways is reimagining what public transit can be. We believe that mobility is the gateway to opportunity—connecting people to housing, education, employment, commerce, and care. By making transportation more accessible, affordable, and sustainable, we empower communities to thrive and unlock economic and social prosperity.

Our mission is to revolutionize transit with a solution that delivers high capacity, exceptional user experiences, unmatched affordability, and minimal environmental impact.

The Glydways system is a groundbreaking network of carbon-neutral, interconnected transit pathways powered by standardized autonomous vehicles on dedicated roadways. Operating 24/7 with on-demand access, it offers personalized and efficient mobility—without the burden of heavy upfront infrastructure costs or ongoing taxpayer subsidies.

With Glydways, we’re building more than a transportation system; we’re creating a future where everyone, everywhere, has the freedom to move.

Meet the team:

The Network Platform team consists of a group of Network, RF, software and cybersecurity engineers responsible for the end-to-end communication system design for Glydways. The team owns the cybersecurity that is responsible for providing secure, reliable, and diverse V2X communications. We work together with the Software, Vehicle Hardware, and the Autonomy engineering teams to produce cutting edge products that unlock the future of transit systems. As a cybersecurity engineer in the Network Platform team, you will be responsible for designing, implementing, and maintaining the security architecture for Operational Technology (OT) networks that integrate technologies such as 5G cellular, WiFi, Ultra-wide band, GNSS, automotive Ethernet, and more.

Roles & Responsibilities:

Demonstrated knowledge on Cyber Security Management System (CSMS) compliance certification process
Must have experience in performing Automotive Cybersecurity Threat Analysis and Risk Assessment (TARA) of an ECU or system both at product and project level
Demonstrated ability to maintain robust cybersecurity practices aligned with OT and automotive cybersecurity standards and regulations
Ability to perform security code reviews of source code by following secure coding practices and advise developers on remediating vulnerabilities
Employ techniques including reverse engineering, fuzzing, and static and/or dynamic analysis
Experience in managing vulnerability management process (Pen tests) by finding, prioritizing, tracking, remediation and validation of vulnerabilities for each component
Analyze product/project cybersecurity requirements, technical specifications and develop cybersecurity test cases and test plans
Advocate, guide and mentor non-security engineers to instill security best practices through secure architecture, design, and development
Experience in securing Key Management system with certificates needed for components in wayside and vehicle
Performing internal security audits and coordinate with external security auditors as needed

Knowledge, Skills and Abilities:

Bachelor's or master's degree in Computer Science or Cybersecurity or Electrical Engineering or related field with equivalent experience
Foundational knowledge of the CWE Top 25
Familiar with Automotive Cybersecurity ISO/SAE 21434, NIST, US data protection CCPA, PCI-DSS, IEC 62443 standards and UNR 155, UNR 156 and WP.29 regulations
Sound technical knowledge of security engineering, computer and network security, authentication and security protocols for both wired and wireless communication
Experience with security concepts such as Secure Boot and secure storage
Strong understanding of securing OT systems in automotive/rail industries is a plus

Glydways provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.