Cybersecurity Engineer

Company Information

OSMIUM is a leading cybersecurity firm based in

Spain

(Osmium Solutions Spain SL, founded in JAN 2020) and

Italy

(Osmium Italy SRL, founded in JUL 2023), with the mission of safeguarding the aerospace, defence and automotive industries’ digital transformation and enabling the secure use of digitalization, connectivity, and SW-based spacecraft, aircraft and vehicles to guarantee the safety, integrity, and resilience of its customers’ missions and operations. OSMIUM is one of the 12 founding members of the EUSPA-led initiative EU Space ISAC, where it is actively working on standardization and threat intelligence, among other topics. Osmium Solutions Spain SL

is registered as supplier of the General Directorate of Armament and Material (DGAM) of the Ministry of Defence of the Kingdom of Spain, in the area of cybersecurity. Moreover, it has been selected as the winner startup of the acceleration programme of the National Cybersecurity Agency (INCIBE) in collaboration with Telefonica Wayra. Osmium Italy SRL

has been incubated at the ESA-BIC Turin and is currently on an incubation programme, as one of the top four cybersecurity startups in Italy by the National Cybersecurity Agency (ACN) in collaboration with Leonardo as industrial partner for the development of its product: Osmium OS, a secure operating system for small satellites and embedded systems. You can get more information about us on our website:

. We would be happy to discuss any doubts you may have about us during the interview.

Information on the Specific Position: Cybersecurity Engineer

As cybersecurity engineer you will be responsible to oversee the security assurance activities for one of our automotive clients. Whether you are working on the definition of systems and related technology solutions, software and hardware development, system integration or our co-ordination with regulatory partners, manufacturers and suppliers, you will have the chance to play a fundamental role in supporting full product lifecycle, from conceptual design and requirement definition to production transition. This is a key role to collaborate with multi-disciplinary project teams to meet customer’s needs and improve the overall security architecture. You will also have the chance to play an active role in defining and tuning the cybersecurity engineering processes and tools.

Some of the day-to-day duties of the role are shown as follows: Define cybersecurity architecture for automotive embedded systems (ECUs, gateways, control systems, infotainment) Perform Threat Analysis and Risk Assessment (TARA) on vehicle systems and features Define and validate cybersecurity requirements at system, software, and hardware levels Collaborate with development teams (software, hardware, system engineering) to integrate security controls into the design Ensure compliance with standards and regulations: ISO/SAE 21434 UNECE WP.29 (R155/R156) Industry best practices (AUTOSAR Security, MISRA, etc.) Support internal/external audits and cybersecurity compliance activities Collaborate with suppliers and partners to define cybersecurity requirements across the supply chain Contribute to security lifecycle management (monitoring, vulnerability management, incident response) Define guidelines and best practices for secure development

For the performance of the duties above, OSMIUM expects the following experience and skills: Master’s in Computer Science, Embedded System Design, or Cybersecurity; Experience in functional safety systems / security engineering; Applied knowledge of Threat Modelling techniques; Working knowledge of at least one of the following security standards/guidelines (DO-326A/ED-202A series, ISO 27000, SAE J3061, ISA/IEC 62443); Applied knowledge of communication protocols; Target oriented, driven workstyle in analytic problem-solving skills required; Preferably a security certification in, e.g., OSCP, CEH, CISSP, ECSA, or related; Fluent English language skills are essential.