Cybersecurity Analyst

About the role

The Cybersecurity Analyst is a savvy practitioner for the field of cybersecurity in the global Automotive organsation of HARMAN. This encompasses the active contribution in the field of threat intelligence, vulnerability management and incident management for product cybersecurity across multiple projects for Automotive customers. Also assistance within the quotation phase to determine risks, assess threats and estimate cost and efforts for development, production and maintenance of customer solutions.

Job Responsibilities

• Threat Intelligence:
  • Actively watch vulnerability feeds, news, and Auto-ISAC reports for potentially relevant data.
  • Monitor Vulnerability Disclosure Program (VDP), working with external researchers and other divisions within HARMAN.
  • Create and manage internal tickets to track this and capture relevant metrics. (e.g. time to resolution, time to first response, time to customer notification).
  • Participate in industry information sharing organizations (e.g. the Auto-ISAC).
• Vulnerability Management:
  • Author disclosure documentation to summarize new vulnerabilities and share appropriately with affected teams.
  • Work with product delivery teams to guide them through a security risk assessment and remediation.
  • Track progress of program teams on remediation efforts.
  • Prepare escalation to executive management teams
  • Review data generated by automated vulnerability scanners to determine applicability and impact. Log all true positives.
• Incident Response:
  • Act as liaison between external security researchers and Harman security engineers.
  • Assist Harman product teams in executing “incident response playbooks” when needed.
  • Assist/coordinate proof-of-concept exploits when needed.
  • Maintain and improve the incident response process for HARMAN product security.
• General:
  • Prepare security training material and conduct security trainings for internal and external teams

• 1-2 years of proven hands-on experience in the field of cybersecurity
• Good analytical, strong problem-solving skills
• Understanding of basic security concepts (secure boot, encryption, authentication, identity management etc.)
• 1+ years of industry or academic SW development experience with embedded environments in at least one of the following languages: C, C++, ASM
• Basic understanding of cybersecurity risk assessments terms and concepts
• Ability to understand security testing methods and build testing plans
• Team-player with strong passion about cybersecurity and automotive
• B.Sc/ M.Sc or equivalent experience in Computer Engineering, Computer Science or Electrical Engineering

• Automotive security experience (preferably from Tier-1 or OEM)
• 1-2 years of hands-on software development experience
• Basic knowledge of automotive-specific technologies (e.g. CAN, automotive ethernet, diagnostics, SW updates, telematics etc.)
• Baisc experience in IoT/embedded systems security architecture or engineering
• Basic experience (self-learned or industry) with common offensive security tools
• Basic knowledge of OS security concepts
• Strong self-learner with very high motivation to develop and grow in the automotive security domain

• Willingness to travel up to 5% of the time

• Work in international teams with the biggest worldwide automotive customers
• Attractive salary package
• Training on the job and extensive technical trainings
• Further career development opportunities
• A great package of additional benefits such as
  • Flexible working time
  • Medical subscription
  • Free parking spaces
  • Meal tickets
  • Employee discounts on our HARMAN products (JBL, AKG, HARMAN Kardon)