Cybersecurity Test Engineer - Senior/Expert level

Remote Egypt, Egypt

C/C++

Automotive Industry

07/06/2024

Req. VR-105068

Project description

As an Automotive Cybersecurity Test Engineer, you will play a vital role in ensuring the security and integrity of Top-Tier automotive software and hardware components. You will be responsible for reviewing, analyzing, and creating cybersecurity test cases, validating threat modeling reports.

Responsibilities

Review, analysis, and create cybersecurity test case for comprehensive software requirements and scenarios

Review and validate TARA report and threat modeling for various SW/HW components

Participate in tool selection, creation, and maintenance of security testing environment and infrastructure

Test case maintenance in compliance with product evolution, requirements, and test cases traceability tracking

Testing documentation creation & test reports

Strong product/system knowledge, defect causes analysis, discussions and strong interaction with Development team.

Help in debugging & identifying crash types (collect debugging traces, memory leaks, find potential software vulnerabilities)

Ensure that all Cybersecurity requirements with Cybersecurity controls are covered by test cases; All test cases are executed, and automated test logs refer back to the test cases; Cybersecurity-related test case design methods have been applied.

Verify Cybersecurity-relevant requirements (i.e. functional requirements-based testing)

Review periodically Threat Intelligence feeds, Filter and report the critical new vulnerabilities related to automotive sector

Participate in CI/CD pipeline creation to cover automated functional cybersecurity testing (DevSecOps)

Skills

Must have

Solid understanding for encryption and hashing techniques and usage of public key infrastructure and testing using relative frameworks and libraries e.g: OpenSSL/WolfSSL/MbedTLS

Python scripting

Bash scripting

Sloid Linux usability skills for development and testing

Linux desktop and embedded Linux platform (yocto)

Build emulation environment with QEMU

Docker or podman environment creation

Solid understanding of networking and security management under Linux systems and their relative tools such as IPtables / SElinux / Secure boot process

Memory analysis and root cause identification with Valgrind and similar tools

CI/CD pipeline with Jenkins

Testing lifecycle according to ISO29119 / ISTQB criteria

Nice to have

Knowledge of hypervisor technologies and their usage in Linux environment

Fuzzing C/C++ application with AFL

Robot framework for automation

Other

Languages

English: B2 Upper Intermediate

Seniority

Senior