Security Test Specialist

About the role

The Security Test Specialist will lead the design and execution of cybersecurity validation activities for automotive ECUs and vehicle‑level systems. You will work closely with BSW, ASW and system teams to ensure that security requirements are met from concept through to test execution.

Key responsibilities

• Develop and run AUTOSAR BSW test suites covering MCAL, ECU abstraction, OS and service layers.
• Perform hands‑on testing of communication protocols (CAN, LIN, Ethernet, FlexRay) and diagnostics (UDS/DoIP).
• Automate test cases using Python, CAPL and tools such as CANoe/CANalyzer.
• Design cybersecurity test strategies compliant with UN R155 and UN R156, including Threat Analysis and Risk Assessment (TARA) and derivation of security test scenarios.
• Conduct penetration testing on ECUs, CAN, Ethernet and OTA interfaces, and validate secure boot, secure flashing and OTA update mechanisms.
• Validate secure communication protocols (CAN, SOME/IP, DoIP, TLS) and diagnostic security features (UDS Security Access – Seed/Key).
• Use security testing tools (Wireshark, fuzzing tools, penetration frameworks) to enhance coverage and generate test reports.
• Support root‑cause analysis, collaborate on mitigation, and prepare compliance documentation for OEM certification.

Required profile

• 7‑10 years of experience in automotive software testing and cybersecurity.
• Strong knowledge of AUTOSAR BSW, MCAL, and ECU abstraction layers.
• Hands‑on experience with CAN, LIN, Ethernet, FlexRay, UDS, DoIP, and related diagnostics.
• Proven ability to design test strategies for UN R155/UN R156 compliance.
• Excellent collaboration and leadership skills, with a focus on mentoring and driving automation.

Required skills

• AUTOSAR BSW testing
• MCAL, ECU abstraction, OS, Services layers
• CAN, LIN, Ethernet, FlexRay, UDS, DoIP
• Python
• CAPL
• CANoe
• CANalyzer
• Wireshark
• Threat Analysis and Risk Assessment (TARA)
• UN R155
• UN R156
• Penetration testing
• Secure boot
• OTA updates
• TLS
• SOME/IP
• Fuzzing tools