Cybersecurity Specialist for eVTOL Development at SkyDrive

, , Japan -

Full Time

Start Date

Immediate

Expiry Date

12 Mar, 26

Salary

16000000.0

Posted On

12 Dec, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, Aviation Security, Regulatory Standards, Security Architecture, Threat Analysis, Risk Assessment, Security Verification, Penetration Testing, Vulnerability Scanning, Certification Strategy, Embedded Systems, Network Security, Cryptography, Authentication Technologies, Software Development, System Integration

Industry

Airlines and Aviation

Description

Position Summary: This position is at the core of safety and certification for SkyDrive Inc.'s eVTOL development. As a Cybersecurity Engineer, you will be responsible for overseeing all cybersecurity assurance activities crucial for achieving Type Certification, ensuring we meet the highest global safety standards (DO-326A/ED-202A, etc.). You will be expected to utilize your extensive experience in aviation security and regulatory standards to define the security architecture, manage its execution across the development lifecycle, and ultimately drive the technical approval process required to safely launch SkyDrive's products into the sky. The successful candidate is required to be appointed as Certifying Staff for the cybersecurity domain during the aircraft certification process. Key Responsibilities: 1. Security Design and Requirements Definition Conduct Threat Analysis and Risk Assessment for the entire aircraft system, including the vehicle and ground support systems, to define security requirements. Design, review, and guide the implementation of security architectures for critical systems such as flight control, navigation, and communication. Evaluate and manage security risks across the entire supply chain (component vendors, software suppliers, etc.). 2. Security Verification and Testing Develop and execute security verification plans at system and integration levels based on defined security requirements. Conduct or oversee security testing such as penetration testing, vulnerability scanning, and fault injection tests. Develop and practice a Cyber Security Incident Response Plan (CSIRP). 3. Certification and Regulatory Compliance Formulate and execute the cybersecurity certification strategy for the aircraft system. Prepare and submit security-related documents (plans, evidence, etc.) based on aircraft certification standards. Act as the Certifying Staff for the cybersecurity domain, leading technical negotiations with the regulatory authority and certifying that the security design and test results meet the certification requirements. Required Qualifications: Experience in Aircraft Development Cybersecurity Practical experience utilizing system security analysis methods (e.g., TARA, FTA, FMEA). Deep understanding of embedded systems and aircraft system architectures (avionics, flight control, communication systems, etc.). Preferred Qualifications: Practical experience in the development and certification process of civil aircraft systems Experience in defining security requirements, analysis, design, and verification based on aircraft certification standards (e.g., DO-326A / ED-202A, DO-356A / ED-203A). Possession of knowledge and experience necessary to meet the requirements for, or prior experience as, Certifying Staff Security experience in new air mobility fields such as drones or UAM. Knowledge of DO-178C and DO-254. Specialized knowledge of network security, cryptography, and authentication technologies. Experience in software development or system integration. Certification in project management (e.g., PMP). What We Offer: Someone who adheres to the highest safety standards. An individual who thinks proactively and can advance tasks in consultation with their supervisor. A proactive person with the initiative to engage and drive progress on the ground. Someone who can communicate smoothly with stakeholders. An individual with strong problem-solving skills, logical thinking, and execution capabilities. A flexible individual who can adapt approaches based on the situation, not limited by past successes or precedents. Someone capable of incorporating others' opinions and ideas while driving tasks towards achieving objectives. A person with a great personality, proactive in communication with stakeholders, and a positive attitude towards work. Type of Employment Permanent Employee or Contract Employee Probationary period: 6 month Place of Employment Nagoya Airport Office: Nagoya Airport Terminal Building 2nd floor, Toyoba, Toyoyama-Cho, Nishikasugai, Aichi Prefecture Measures to Prevent Secondhand Smoke: Smoking Room Provided Scope of Change: Places determined by the Company (including places where telework is performed) Working Hours Discretionary labor system Discretionary Labor System: Specialized Class Deemed working hours per day: 10 hours Basic working hours: Start 9:00 End 18:00（Including 1hour break time） Overtime Work: Available Holidays 115 days off per year（Saturday / Sundays / Newyear holidays（12/29～1/3） / Company designated holidays） Annual paid leave Refresh leave (Granted after 1, 3, 4, 5 years of service) Salary Estimated Annual Salary: JPY 13,000,000 - JPY 16,000,000 Monthly Salary: JPY 1,084,000 - JPY 1,334,000 Includes fixed overtime pay for 20 hours, amounting to JPY 375,239 - JPY 461,812 *Additional overtime pay will be provided for hours exceeding the fixed overtime. To be determined based on skills, experience, and abilities Expenses Commuting allowance, business trip allowance, moving allowance, etc. Relocation Packages *There are some conditions. Social Insurance Health insurance Employee pension (according to Japan standards) Employment insurance Worker’s accident compensation insurance Scope of Work Change Reassignment may occur to any other work.

Responsibilities

The Cybersecurity Specialist will oversee cybersecurity assurance activities for eVTOL development, focusing on safety and certification. Responsibilities include conducting threat analysis, defining security requirements, and managing security risks across the supply chain.