Charging and Energy Infrastructure Cybersecurity Engineer at Ford Motor Company

Job description

We are the movers of the world and the makers of the future. We get up every day, roll up our sleeves, and build a better world — together. At Ford, we're all part of something bigger than ourselves. Are you ready to change the way the world moves? The Charging and Energy Infrastructure Cybersecurity Engineer will act as a technical lead for the security of our charging and energy ecosystem, including EVSE, home energy management systems, and grid integration. You will be responsible for developing security designs, writing requirements, and researching future energy security technologies for infrastructure products. You will work closely with product teams as they innovate, source new products, and design new features, performing threat models and developing security controls through a collaborative partnership. You will maintain an in-depth understanding of the technologies under review, working to close security gaps, mitigate identified vulnerabilities, and report risks and findings to security management. As a security subject matter expert on the Charging and Energy Infrastructure Cybersecurity Team, you will shape the security posture for current and future energy products to ensure our infrastructure remains resilient and secure. What you'll do... • Perform threat modeling and security risk assessments for EVSE and energy infrastructure products • Develop and validate security requirements for charging-related protocols (i.e., ISO 15118, OCPP, and OCPI) • Secure V2G and V2H communication pathways • Review, develop, and maintain security requirements and Design Validation Methodologies for EV charging and energy infrastructure products • Develop security controls and mitigations for risks found in embedded components • Work with hardware vendors, internal product teams, and internal cloud teams to ensure end-to-end security in the electric vehicle charging ecosystem • Investigate and resolve complex security issues across hardware, firmware, and communication layers • Research emerging threats to smart grids and IoT energy devices to keep Ford's infrastructure protected • Communicate high-level design and low-level security details at both the working and management levels • Work with cross-functional teams to integrate security controls into the development and manufacturing process • Partner with product teams during the innovation and sourcing of new products and features to perform threat modeling and develop integrated security controls You'll have... • Bachelor's degree in Electrical Engineering, Computer Engineering, Software Engineering, Computer Science, or Cybersecurity • 5+ years of experience securing embedded systems, IoT devices, automotive systems, or Industrial Control Systems • 3+ years of experience with networked systems and communication protocols (TCP/IP, Ethernet, Wi-Fi, or Cellular) • Ability to develop and maintain engineering documentation including security requirements, specifications, and test plans • Strong communication skills with the ability to explain complex security risks to non-technical stakeholders Even better, you may have... • Experience with secure charging implementations and protocols (i.e., ISO 15118, OCPP, and PKI) • Experience with hardware security features such as HSM, TEE, and secure boot for embedded IoT devices • Experience with coding for security tool development and firmware analysis (i.e., C, C++, Python, or Go) • Experience securing cloud-connected systems and communication interfaces (e.g., MQTT, TLS, or REST APIs) • Familiarity with industry cybersecurity and grid standards (i.e., ISO 21434, NIST SP 800-213, NIST XFC Cybersecurity) • Familiarity with security risk assessment and quality methodologies (i.e., TARA, FMEA, DVP&R) • Experience with vulnerability management tooling and processes • Knowledge of Ford's internal engineering systems and energy services requirements You may not check every box, or your experience may look a little different from what we've outlined, but if you think you can bring value to Ford Motor Company, we encourage you to apply! As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder…or all of the above? No matter what you choose, we offer a work life that works for you, including: • Immediate medical, dental, vision and prescription drug coverage • Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more • Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more • Vehicle discount program for employees and family members and management leases • Tuition assistance • Established and active employee resource groups • Paid time off for individual and team community service • A generous schedule of paid holidays, including the week between Christmas and New Year’s Day • Paid time off and the option to purchase additional vacation time. For a detailed look at our benefits, click here: fordcareers.co This position is a range of salary grades 7 | $99,600 – $166,600 SOUTHEAST MI RESIDENTS: This role is posted as remote unless you reside within 50 miles of Dearborn, MI—in which case we request on-site presence up to 4 days a week. Visa sponsorship is not available for this position. Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. We are an Equal Opportunity Employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, if you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660. #LI-Remote #LI-AH1

Requirements

Must-haves

You will work closely with product teams as they innovate, source new products, and design new features, performing threat models and developing security controls through a collaborative partnership.
What you'll do...
Perform threat modeling and security risk assessments for EVSE and energy infrastructure products
Develop and validate security requirements for charging-related protocols (i.e., ISO 15118, OCPP, and OCPI)
Secure V2G and V2H communication pathways
Review, develop, and maintain security requirements and Design Validation Methodologies for EV charging and energy infrastructure products
Develop security controls and mitigations for risks found in embedded components
Work with hardware vendors, internal product teams, and internal cloud teams to ensure end-to-end security in the electric vehicle charging ecosystem
Investigate and resolve complex security issues across hardware, firmware, and communication layers
Research emerging threats to smart grids and IoT energy devices to keep Ford's infrastructure protected
Communicate high-level design and low-level security details at both the working and management levels
Work with cross-functional teams to integrate security controls into the development and manufacturing process
Partner with product teams during the innovation and sourcing of new products and features to perform threat modeling and develop integrated security controls
You'll have...
Bachelor's degree in Electrical Engineering, Computer Engineering, Software Engineering, Computer Science, or Cybersecurity
5+ years of experience securing embedded systems, IoT devices, automotive systems, or Industrial Control Systems
Strong communication skills with the ability to explain complex security risks to non-technical stakeholders
Even better, you may have...
Experience with secure charging implementations and protocols (i.e., ISO 15118, OCPP, and PKI)
Experience with hardware security features such as HSM, TEE, and secure boot for embedded IoT devices
Experience with coding for security tool development and firmware analysis (i.e., C, C++, Python, or Go)
Experience securing cloud-connected systems and communication interfaces (e.g., MQTT, TLS, or REST APIs)
Familiarity with industry cybersecurity and grid standards (i.e., ISO 21434, NIST SP 800-213, NIST XFC Cybersecurity)
Familiarity with security risk assessment and quality methodologies (i.e., TARA, FMEA, DVP&R)

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythongorest

Platform: eightfold
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

Paid Time Off

Parental Leave