Discipline Engineer

Valeo is a tech global company, designing breakthrough solutions to reinvent the mobility. We are an automotive supplier partner to automakers and new mobility actors worldwide. Our vision? Invent a greener and more secured mobility, thanks to solutions focusing on intuitive driving and reducing CO2 emissions. We are leader on our businesses, and recognized as one of the largest global innovative companies.

RESPONSBILITIES:

- Lifecycle Management: Execute and document each stage of the Product Security Incident Response Lifecycle, from initial detection of a vulnerability to resolution and formal communication.

- Triage & Risk Assessment: Conduct technical triage for automotive security incidents and customer-reported issues to determine scope, urgency, and impact on vehicle safety (ISO 26262) and security.

- Real-time Decision Making: Make swift, informed decisions to mitigate risks, protecting Valeo’s reputation and safeguarding vehicles from active exploits.

- Stakeholder Communication: Provide clear technical briefings and executive updates to internal engineering teams, legal counsel, OEMs, and regulatory bodies during and after an incident.

- Deep-dive Analysis: Perform root-cause analysis on affected products, generate forensic reports, and analyze automotive threat landscape trends to improve future product design.

- Plan Development: Develop and maintain Incident Response Plans tailored to specific electronic control units (ECUs) and vehicle platforms.

- Customer Guidance: Validate security notifications and provide authoritative guidance to OEMs regarding patch implementation and risk mitigation.

REQUIRED QUALIFICATIONS:

- Minimum 5–6 years of experience in Automotive Product Development or Testing with exposure and knowledge on product cybersecurity.

- Proven experience in Product Cybersecurity, specifically in reviewing Threat Analysis and Risk Assessment (TARA).

- Preferred - hands-on experience in incident response, vulnerability analysis, or product security research.

- Direct experience with security/ vulnerability investigations in embedded systems, IoT, or ECUs.

- Hands-on investigative experience involving automotive communication protocols (e.g., CAN, LIN, Automotive Ethernet).