SECURITY MANAGER at Bosch Group

Sofia, Sofia-City, Bulgaria -

Full Time

Start Date

Immediate

Expiry Date

08 Feb, 26

Salary

0.0

Posted On

10 Nov, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Aspects, Risk Assessment, Embedded Systems, Cross Team Management, Management Level Reporting, SW Development, Secure System Architecture, Vulnerability Assessment, Penetration Testing, Cryptographic Algorithms, Static Code Analysis, Dynamic Code Analysis, Fuzzing, Reverse Engineering, AUTOSAR, Trusted Computing

Industry

Software Development

Description

Company Description Welcome to a place where your ideas lead to something big! Welcome to Bosch! Bosch is a leading global supplier of technology and services for the automotive industry. Bosch Engineering Center Sofia was founded in 2019 as an integral part of Bosch worldwide engineering network. Today our team of nearly 700 talented software and hardware professionals work on the latest automotive technologies that shape the future of mobility. Some of our focus areas include Automated Driving Systems, Artificial Intelligence for accident prevention, Driver Assistance, Autonomous Parking, Electric Mobility, and eBike Systems. Our mission is to contribute to safer mobility through software technologies with care for the environment and society. Join our team and help us transform the automotive industry! We are looking for the right person for the following vacancy: Security Manager Job Description Analyze internal and Customer specifications. Participate in Customer discussions and meetings. Product security concept/architecture development withing the given frames and state of the art. Risk evaluation/assessment pre- and post-production of the product. Coordinating security topics with SW, System and Validation & Verification teams. Collaborate with product/solutions departments to identify and/or develop secure solutions. Feasibility analysis and risk assessment of proposed solutions/fixes in an embedded system environment Networking with Architects/Experts community towards Cyber Security implementation Consulting for Security aspects in design and process issues throughout the product design, development, and post-launch phases Conducting research and development activities to further support company and departmental initiatives Interfacing and collaborating with cross-functional teams to organize Security Boot camps org wide to improve cyber security mindset ratio. Be part of the security group’s center of competence. Contributing with security knowhow and related process and technical improvements. Qualifications Must have: Experience in the security aspects of multiple platforms, operating systems, software, communications, and network protocols Feasibility analysis and risk assessment of proposed solutions/fixes in an embedded system environment Embedded systems architecture understanding to perform a detailed analysis of software and hardware features to secure embedded devices. Experience with cross team feature management (tracking, consulting, and evaluating security features). Ability to prepare detailed plan and following/guiding teams through different standards and processes concerning security. Experience with management level reporting and feature tracking. Nice to have: SW development experience in embedded C/C++ Expertise in Secure System Architecture for Products and Solutions (Hardware & Software) Knowledge of system life cycle management principles, including software security and usability Well aware of Vulnerability assessment, static/dynamic code analysis, fuzzing, penetration testing, cryptographic algorithms and implementation or security research Aware of Penetration Testing – Hardware, Embedded Systems, Operating Systems, Network Equipment, Wireless, Mobile, Databases Hacking and/or reverse engineering Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit) Development environments for embedded systems- cross-compilation, debug tools, ICE, JTAG etc. Trust Zone, Trusted Computing Group, Trusted Platform Module, Trusted Execution Environment Knowledge on AUTOSAR/AUTOSAR security modules Additional Information What we offer: Flexibility - flexible working time and options to work from home Career Development - personalized training programs and professional qualifications, development opportunities and programs, as well as foreign language courses Work-life Balance - 25 days paid annual leave, additional day off on your birthday Wellness - Sports card, Private health insurance and life insurance Engaging Social Activities – regular teambuilding activities, sporting events and celebrations State-of-the-art Tech Labs - Image Quality Lab, Bench Rooms and Test Labs, Test Cars and e-Bikes, etc Modern Office - gaming and relax areas, fresh fruit and drinks, free parking Additional Allowance and Discounts – food vouchers, lunch grant, transportation allowance Personal Support – Parental bonus, Employee Assistance Program The personal data you provide to us is processed by Robert Bosch EOOD within your application in the recruiting process. Your personal data is shared exclusively and only to employees of the Bosch Group and the candidate data retention period is 6 months. You have the right to obtain information about the processing of your personal data. In addition, you have the right to correct, to block and to delete it in accordance to the legal regulations. To enforce your rights, you only need to contact us. Remark: If you request to block or to delete your data, your application can no longer be considered. Предоставените от вас лични данни се обработват от Роберт Бош ЕООД в рамките на заявената от вас кандидатура в процеса на набиране на персонал за нашата фирма. Те се разкриват изключително и само на сътрудници на Група Бош и се съхраняват при нас за срок от 6 месеца. По ваше желание можете да получите информация за обработката на вашите лични данни. Освен това имате право на тяхното коригиране, блокиране и заличаване в съответствие със законовите разпоредби. За да се възползвате от тези права е необходимо само да се свържете с нас. Забележка: При заявка за блокиране и изтриване на вашите данни, кандидатурата ви вече не може да бъде разглеждана.

Responsibilities

The Security Manager will analyze internal and customer specifications, participate in discussions, and develop product security concepts. They will also coordinate security topics with various teams and conduct risk evaluations pre- and post-production.