About the Role :
Join our engineering team as a Security Engineer and play a key role in shaping the future of automotive security for BMW products. In this role, you will tackle complex security challenges across modern connected vehicles, applying your expertise in hardware and software security domains to safeguard next-generation automotive systems.
Key Responsibilities :
- Design, implement, and validate security features on Linux and Android platforms, focusing on kernel hardening, permission management, capabilities, namespaces, and Linux RPC.
- Apply isolation techniques and containerization to improve system security and reduce attack surfaces.
- Implement and support security mechanisms such as secure boot, disk encryption, SELinux policies, and cryptographic protocols to protect automotive systems.
- Collaborate with software developers and architects to integrate security best practices into the development lifecycle.
- Develop and maintain automated security testing and continuous integration pipelines using tools like Jenkins, Zuul, GitHub Actions, or GitLab CI.
- Assist in performing threat modeling and risk analysis to proactively identify and mitigate security threats.
- Conduct security assessments, vulnerability analysis, and penetration testing to ensure system resilience.
- Document security findings, provide actionable recommendations, and assist in remediation efforts.
- Stay up to date with the latest security trends, vulnerabilities, and automotive security standards.
Required Experience and Skills :
Hands-on experience with Linux and / or Android security, including kernel hardening, managing Linux permissions, capabilities, namespaces, and Linux RPC.Good understanding of isolation techniques and containerization mechanisms is an advantage.Strong knowledge of security principles and advanced operating system features such as secure boot, disk encryption, SELinux, integrity protection, and cryptographic protocols.Proficiency in modern software development using C++, Java, or Kotlin. Experience with Python scripting for automation and tooling is a plus.Familiarity with Continuous Integration / Continuous Delivery (CI / CD) pipelines and tools such as Jenkins, Zuul, GitHub Actions, or GitLab CI.Basic understanding of threat modeling concepts; practical experience is a plus.Excellent analytical and problem-solving skills.Ability to work effectively in cross-functional Agile teams.Strong communication skills to articulate security concepts and collaborate with technical and non-technical stakeholders.(ref : hirist.tech)