[Security] Mobility Security Engineer - Vehicle Security

Who we are

We are responsible for overseeing global vehicle security incident response and vulnerability reporting. We identify the root causes of vulnerabilities to drive improvements, and we manage global certification compliance for the post-production cybersecurity management system.

Responsibilities

In this role, we monitor cybersecurity incidents and vulnerabilities that arise after vehicle mass production, analyze their impact on our vehicles, and drive improvements accordingly. In addition, we handle regulatory compliance for post-production (post-market) activities.

■ Global Vehicle Cybesecurity Incident and Vulnerability Response

• Monitoring global vehicle security incidents and vulnerabilities
• Analyzing the impact and root causes of incidents and vulnerabilities through reproduction/replication
• Deriving response and improvement measures through incident response protocols

■ Post-Production Compliance for Global Cybersecurity Regulations

• Responding to post-production requirements under vehicle cybersecurity regulations such as UNECE-R155
• Supporting certification audits for global regulations in Europe, China, India, and other regions
• Responding to cybersecurity incidents based on North America's NHTSA cybersecurity guidelines

■ Product Security Inspection and Framework Establishment

• Establishing security governance frameworks through inspection of robotics products
• Supporting group affiliates (e.g., EV chargers, wall pads) in establishing security governance frameworks

Minimum Qualifications

• Bachelor's degree related to Security or IT
• Minimum 3 years of of cybersecurity (or relevant) experience

Preferred Qualifications

• Experience in conducting security assessments for embedded products
• Experience in responding to automotive cybersecurity regulations and standards such as UNECE R155
• Experience in collaborating with OEMs to perform vulnerability analysis and remediation
• Experience in working with a PSIRT (Product Security Incident Response Team)
• Experience with ISO/SAE 21434 or TARA and cybersecurity risk assessment methodologies
• Experience in leading or participating in compliance projects related to the EU Cyber Resilience Act (CRA) or the Radio Equipment Directive (RED)

Others

[Notes]

• In accordance with the employment protection laws, eligible candidates (disabled individuals, veterans, etc.) will receive preferential benefits during the process.
• Applications are accepted only through the Hyundai Motor Company career page, and any other methods are not allowed.
• Submitting your applications early prior to the deadline is recommended to prevent mass traffic and submission issues.
• Additional assignments may be given during the interview rounds, if necessary.
• The recruitment schedule may be adjusted depending on the progress of the recruitment process.
• The expected position level specified in the job description may change based on each individual's experience and evaluation results.
• For any inquiries on recruitment, please refer to the [FAQs] or submit a ticket through '1:1 Inquiries' on our webpage.

[Precautions]

• If any of the following conditions apply, your acceptance may be revoked, or you may be subject to disadvantages in the selection process:
• If the information submitted during the recruitment process (including the application form) differs or cannot be proven in documentation
• If you are ineligible to work under company regulations
• If you are ineligible to travel abroad (for men, Korean nationals who have not completed military service or are not exempt from military service by the joining date)
• If you are unable to join the company on the start date designated by the company upon receiving the final offer
• Our company respects the trade secrets of third parties and strives to comply with relevant laws and regulations, such as The Unfair Competition Prevention and Trade Secret Protection Act. Please be careful not to disclose any confidential information related to your former/current workplace or to violate the confidentiality obligation of your former/current workplace, during the recruitment process. Violation may result in disadvantage in the recruitment process.

Position: Research Engineer, Senior Research Engineer