Senior Product Cybersecurity Engineer

At Oshkosh, we build, serve and protect people and communities around the world by designing and manufacturing some of the toughest specialty trucks and access equipment. We employ over 15,000 team members all united by a common purpose. Our engineering and product innovation help keep soldiers and firefighters safe, is critical in building and keeping communities clean and helps people do their jobs every day.

Move beyond the SOC and consider applying your cybersecurity skills in innovative and complex ways impacting some of the hardest working people in America.

The Senior Product Cybersecurity Engineer works with the Customers, Project Managers, and the Product Engineering team to support secure engineering and design with a focus on automotive systems and subsystems. This role will heavily leverage ISO 21434 cybersecurity for road vehicles, understand NIST risk management framework (RMF), and cyber survivability attributes (CSA) to establish and mitigate risks to automotive systems.

YOUR IMPACT

• These duties are not meant to be all-inclusive and other duties may be assigned
• Evaluate, advise, and implement cybersecurity technologies onto vehicles and supporting systems
• Support the Product Engineering team in writing cybersecurity requirements, test plans, and conduct testing
• Apply Threat Analysis and Risk Assessment (TARA) concepts per ISO 21434
• Catalog and manage cybersecurity risks supporting Product Engineering teams
• Peer review security critical areas of software and device configuration
• Document cybersecurity compliance
• Establish component cybersecurity requirements
• Leverage Software Bill-of-Materials (SBOM) to manage component security risk and supply chains
• Monitor software applications and libraries for security vulnerabilities
• Write and maintain secure software development processes, procedures, and other associated documentation to support software assurance activities
• Translate cybersecurity standards into practical processes, procedures, and internal standards
• Strong leadership and interpersonal communication ability

MINIMUM QUALIFICATIONS:  

• Bachelor’s degree with five (5) or more years of experience in the field or in a related area
• DoD approved 8570 Baseline certification for an IAM level III role
• Position requires the ability to obtain and maintain security clearance
• Experience applying STIGs and hardening Windows and Linux systems
• Experience in running and managing vulnerability assessment tools
• Experience with Controller Area Network (CAN) technologies
• Familiarization with ISO 21434 Cybersecurity engineering for road vehicles

STANDOUT QUALIFICATIONS: 

• Master’s degree in Cybersecurity, computer, software, or engineering discipline
• Ability to conduct decision analysis functions
• Familiarity of relevant security standards such as: ISO 26262, SAE J3061, NIST requirements, FIPS 140/199/200
• Experience in cybersecurity best practices supporting critical infrastructure
• Experience with telematics and supporting infrastructures
• Experience performing penetration tests on embedded and/or IoT systems
• Experience using and managing static analysis and software composition analysis tools
• Certifications: CISSP, GIAC, CAP, S+, ACT

WHY OSHKOSH?

Moving the future forward is our priority and this includes your future. We encourage professional development and champion our employees’ success through various skills and training opportunities. Named one of the World’s Most Ethical Companies™ by Ethisphere Institute for six consecutive years, everything we do at Oshkosh is guided by our core values and the 15k+ team members around the world who embody them.

We put people first. We do the right thing. We persevere. We are better together.

Visit our Glassdoor profile
Keep up with us on LinkedIn

#LI-VR

Pay Range:

$91,800.00 - $153,200.00

Oshkosh is committed to working with and offering reasonable accommodation to job applicants with disabilities. If you need assistance or an accommodation due to disability for any part of the employment process, please contact us at [email protected].

Oshkosh Corporation is an Equal Opportunity and Affirmative Action Employer. This company will provide equal opportunity to all individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Information collected regarding categories as provided by law will in no way affect the decision regarding an employment application.

Oshkosh Corporation will not discharge or in any manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with Oshkosh Corporation's legal duty to furnish information.

Certain positions with Oshkosh Corporation require access to controlled goods and technologies subject to the International Traffic in Arms Regulations or the Export Administration Regulations. Applicants for these positions may need to be "U.S. Persons," as defined in these regulations. Generally, a "U.S. Person" is a U.S. citizen, lawful permanent resident, or an individual who has been admitted as a refugee or granted asylum.