Product Cybersecurity & Embedded Systems Security Engineer
- Montreal, QC, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
The mission of the LGM Group is to design unique innovative solutions (products, organizational, or technological) for large industrial groups, aiming to enhance the performance of large complex systems and infrastructures during operational and maintenance phases.
LGM Group is the historical entity of the Group, where everything started more than 30 years ago. Today, LGM comprises approximately 1500 employees, both in France and internationally, who analyze, optimize, and manage the design, operation, and maintenance of complex systems.
We are looking for a Product Cybersecurity Engineer to support its clients in designing, developing and maintaining secure products and systems. You will help integrate cybersecurity throughout the product lifecycle, working closely with systems, software, hardware, validation and functional safety teams.
LGM Group is the historical entity of the Group, where everything started more than 30 years ago. Today, LGM comprises approximately 1500 employees, both in France and internationally, who analyze, optimize, and manage the design, operation, and maintenance of complex systems.
We are looking for a Product Cybersecurity Engineer to support its clients in designing, developing and maintaining secure products and systems. You will help integrate cybersecurity throughout the product lifecycle, working closely with systems, software, hardware, validation and functional safety teams.
- Plan product cybersecurity activities and define project deliverables.
- Perform Threat Analysis and Risk Assessment (TARA), identify attack scenarios and recommend risk mitigation measures.
- Define cybersecurity goals and requirements, allocate them to system, software and hardware components, and maintain traceability.
- Participate in architecture and design reviews to embed security principles.
- Determine or assess protection mechanisms.
- Support development teams in applying secure development practices and assessing third-party and open-source components.
- Describe cybersecurity verification and validation activities, assess test results and track corrective actions.
- Evaluate vulnerabilities and the security impact of product changes, and support the treatment of residual risks.
- Review supplier deliverables and prepare analyses, reports and evidence demonstrating compliance with cybersecurity requirements.
- Coordinate cybersecurity and functional safety interfaces to ensure consistent protection measures.
- Bachelor’s degree in computer, software, electrical or systems engineering, or a related discipline.
- Relevant experience in product cybersecurity, embedded systems security or industrial systems security.
- Ability to assess complex architectures, interfaces and attack surfaces.
- Experience in risk assessment, threat modelling and cybersecurity requirements development.
- Knowledge of one or more applicable standards, depending on the industry:
- ISO/SAE 21434: cybersecurity engineering for road vehicles.
- IEC 62443, particularly Parts 4-1 and 4-2: secure development and security requirements for industrial components.
- Sound understanding of communication protocols, embedded operating systems and applied cryptography principles.
- Strong analytical skills, attention to detail and the ability to work independently and with multidisciplinary teams.
More about this job
Responsibilities
Plan and coordinate product cybersecurity throughout the lifecycle, including threat and risk assessments, security requirements, architecture reviews, and secure development support. Define and assess verification activities, evaluate vulnerabilities and product changes, review supplier evidence, and coordinate cybersecurity with functional safety.
Requirements
A bachelor’s degree in computer, software, electrical, or systems engineering, or a related discipline, and relevant experience in product, embedded systems, or industrial systems cybersecurity are required. Candidates should have experience with risk assessment, threat modeling, and cybersecurity requirements, knowledge of applicable standards such as ISO/SAE 21434 or IEC 62443, and understanding of communication protocols, embedded operating systems, and applied cryptography.
Skills
- Product Cybersecurity
- Embedded Systems Security
- Threat Analysis and Risk Assessment
- Threat Modeling
- Risk Mitigation
- Secure Architecture
- Secure Development Practices
- Vulnerability Assessment
- Cybersecurity Verification and Validation
- Communication Protocols
- Embedded Operating Systems
- Applied Cryptography
- Systems Engineering
- Functional Safety Coordination
- Supplier Deliverable Review
Visa sponsorship
Not detected in the job text
Categories
- Engineering
- Security & Safety
- Technology
- Software
Keywords
- Product Cybersecurity
- Embedded Systems Security
- Industrial Systems Security
- Threat Analysis and Risk Assessment
- TARA
- Attack Scenarios
- Cybersecurity Requirements
- ISO/SAE 21434
- IEC 62443
- Secure Development
- Third-Party Components
- Open-Source Components
- Cybersecurity Verification and Validation
- Vulnerability Assessment
- Risk Mitigation
- Functional Safety
- Communication Protocols
- Embedded Operating Systems
- Applied Cryptography
- Architecture Reviews
- Security Testing
- Supplier Deliverables
- Systems Engineering