Product Engineering – Cybersecurity Engineer – TARA Specialist

Role Summary

The TARA Engineer is responsible for conducting and maintaining Threat Analysis and Risk Assessment (TARA) activities for vehicle systems, software, and connected services in accordance with ISO/SAE 21434 and organizational cybersecurity processes. This role supports the identification, evaluation, and treatment of cybersecurity risks throughout the product lifecycle by creating new TARAs and performing Re-TARA assessments triggered by design changes, software updates, vulnerability findings, and regulatory requirements. The position works closely with cross-functional engineering teams to ensure cybersecurity risks are appropriately managed and documented while supporting compliance with UN-R155 and the organization's Cybersecurity Management System (CSMS).

Key Responsibilities

Area

Responsibilities / Expected Outputs

Project Information Collection and Item Identification

·       Collect project information from stakeholders and identify in-scope systems, ECUs, and components requiring TARA assessment.

·       Create and maintain the assessment item list to ensure complete cybersecurity coverage.

ECU Information Coordination

·       Request ECU and system information from responsible engineering teams and stakeholders.

·       Follow up as necessary to ensure timely and accurate completion of required information.

Technical Information Review and Consolidation

·       Review and validate ECU and system information provided by engineering teams.

·       Consolidate technical information required for TARA activities and clarify gaps or inconsistencies with stakeholders.

TARA Development and Database Management

·       Perform Threat Analysis and Risk Assessment (TARA) activities in accordance with established methodologies and cybersecurity processes.

·       Document assessment results and maintain TARA records within the designated database and tool environment.

Assessment Completion and Stakeholder Communication

·       Communicate TARA completion status and assessment results to relevant stakeholders.

·       Support project teams by providing assessment outcomes, status updates, and required cybersecurity documentation.

Expected Deliverables

Ÿ   TARA Document

Ÿ   Re-TARA Reports

Ÿ   ECU Information Sheet

Ÿ   Database Registration

Ÿ   Completion Report

Required Knowledge and Skills

Ÿ   Knowledge of Threat Analysis and Risk Assessment (TARA) methodologies and cybersecurity risk assessment principles.

Ÿ   Understanding of ISO/SAE 21434 and automotive cybersecurity engineering processes.

Ÿ   Ability to analyze vehicle systems, ECUs, software, and network architectures from a cybersecurity perspective.

Ÿ   Strong analytical and problem-solving skills with attention to detail.

Ÿ   Effective communication and stakeholder coordination skills.