Senior Engineer- Product/Application Security Engineering

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world's most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We're looking for talented team members who want to Dream. Do. Grow. with us.

To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.

Toyota's Cybersecurity & Risk Management (CSRM) group objective is to become a global cybersecurity leader in the mobility space - with the talent, scale, and services to enable our mission of securely bringing mobility for all.

We hope you will join us in this time of transformation and be a part of defining the next-generation cybersecurity capabilities for one of the largest global companies in the world. #Cyber

Who we're looking for

Toyota is looking for team members who are passionate about technology and interested in joining a collaborative and highly motivated team as a Product Cybersecurity Senior Engineer.

The primary responsibility of this role is to perform and support advanced security testing engagements across a wide range of next-generation modern automotive systems throughout our connected vehicle ecosystem. Reporting to the Senior Manager, the person in this role will join the Product Cybersecurity Group to help shape the overall cybersecurity posture for our connected vehicle ecosystem.

What you'll be doing

Perform hands-on testing to verify and validate cybersecurity requirements across cybersecurity relevant vehicle systems.

• Perform other activities including penetration testing across cybersecurity relevant vehicle systems.
• Develop and refine cybersecurity test procedures for in-vehicle systems and connected ecosystems.
• Research emerging cybersecurity threats, tools, and solutions related to automotive systems.
• Translate security requirements into actionable test strategies and contribute to a comprehensive cybersecurity testing playbook for internal team use.
• Collaborate with engineering teams to ensure test procedures align with evolving system architectures and security requirements.
• Develop internal tools, scripts, or frameworks to support and automate the evaluation of cybersecurity requirements.
• Contribute to long-term goals of scalable and automated cybersecurity testing across the full automotive technology stack.
• Makes basic contributions to management and solves intermediate to complex business problems.

• 5+ years of relevant work experience.
• Bachelors in EE, ME, CS, CECS, and/or Systems Engineering or relevant experience.
• Proficient in C, C++, ARM and/or Python.
• Strong knowledge of core security fundamentals and embedded security best practices (e.g., secure boot, secure debug, secure storage, secure communications) .
• Experience with Linux and other embedded operating systems.
• Experience with reverse engineering and binary analysis tools (e.g., IDA Pro, Ghidra).
• Experience with on-board communication interfaces such JTAG, SPI, UART, SWD.
• Demonstratable experience with hardware lab equipment such as oscilloscopes, logic analyzers, etc.

• Knowledge about in-vehicle automotive networking protocols (e.g. CAN, LIN).
• Hands-on experience performing security assessments on OS or application-level of iOS/Android applications.
• Familiarity or experience with Fault Injection Attacks and Side Channel Analysis techniques.
• Experience with vulnerability analysis using CVSS scoring and CWE types.
• Strong hardware skills such as SMD/BGA soldering, "chip-off" and reflow.
• Self-education to continuously learn and invest in skills and knowledge relevant to the team and the position.
• Going above and beyond by understanding the business, anticipating needs, and delivering results that meet all quality expectations.
• Pro-active management and creation of tasks, definitions of done, and deliverable dates for tasks requested of you and projects you manage.
• Mentoring and coaching to help develop a community of peers/experts.
• Experience with secure software development and/or product cybersecurity engineering standards and best practices to support the secure by design engineering process.

• A work environment built on teamwork, flexibility and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)