Lead Engineer - Software and Cyber Security

Responsibilities & Key Deliverables

Position Overview 
We are looking for an Automotive Cyber Security Testing Lead Engineer – Powertrain ECUs to 
lead cybersecurity engineering activities for safety-critical powertrain control systems, 
including ICE, Hybrid, and Electric powertrain ECUs. This role is responsible for ensuring that 
powertrain functions are verified and validated to protect against cyber threats while complying 
with global automotive cybersecurity regulations throughout the product lifecycle.

Key Responsibilities 
• Lead cybersecurity engineering activities for powertrain ECUs (Engine ECU, VCU, MCU, 
BMS, HCU, OCDC etc.) 
• Act as cybersecurity technical owner for assigned powertrain programs 
• Define and review test requirements to verify Cyber security controls (FUZZ and PEN 
tests)
• Define and review secure architecture including secure boot, secure communication, 
OTA security, and key management 
• Perform and lead Threat Analysis and Risk Assessment (TARA) as per ISO/SAE 21434 
• Define cybersecurity goals, requirements, and mitigations for powertrain systems 
• Guide secure architecture implementation for all Cyber Security controls like secure 
boot, secure flashing, secure communication etc. 
• Ensure cybersecurity alignment with functional safety (ISO 26262) requirements 
• Support cybersecurity compliance activities for UNECE R155, AIS 189 and R156, AIS 
190. 
• Coordinate cybersecurity activities with system, software, hardware, and validation 
teams 
• Lead cybersecurity reviews with Vehicle teams, suppliers, and internal stakeholders 
• Guide and mentor cybersecurity engineers and review technical deliverables 
• Support vulnerability management, incident response, and post-SOP cybersecurity 
activities
Powertrain-Specific Cybersecurity Scope 
• Protection of torque, speed, propulsion, charging and energy management functions 
• Secure diagnostics and calibration access (UDS) 
• Secure production and service software updates 
• Protection against unauthorized software or calibration manipulation

Standards & Compliance 
• ISO/SAE 21434 – Road Vehicles Cybersecurity Engineering 
• UNECE R155, AIS 189 – Cybersecurity Management System 
• UNECE R156, AIS 190 – Software Update Management System

• ISO 26262 – Functional Safety (coordination and alignment)

Experience

• 10–12+ years of experience in automotive embedded or powertrain systems 
• 3–6+ years of hands-on automotive cybersecurity experience 
• 2–3+ years of hands-on scripting and automation using languages 
• Strong understanding of powertrain ECU development lifecycle Technical Skills 
• Powertrain control systems and real-time embedded software 
• CAN, CAN-FD, Automotive Ethernet, UDS, and various ECU level interfaces 
• Cryptography fundamentals, PKI, key management 
• Secure boot, HSM, secure diagnostics and other Cyber Security Controls 
• Cybersecurity vulnerability and incident management 
• OTA/FOTA update security and backend interaction 
• Threat modelling and vulnerability analysis Soft Skills & Leadership 
• Strong technical leadership and ownership mindset 
• Effective communication with cross-functional teams 
• Risk-based decision making in safety-critical systems 
• Mentoring and guiding engineers

Industry Preferred

Qualifications

General Requirements

Our commitment to Diversity, Equity, and Inclusion

At Mahindra and Mahindra Limited, we believe that diversity drives innovation, and inclusion is at the heart of everything we do. We are committed to cultivating a workplace where every individual feels valued, respected, and empowered to thrive.
We are proud to be an Equal Opportunity Employer. All qualified applicants will be considered for employment without regard to age, caste, race, religion, color, ethnic origin, gender identity, nationality, physical or mental disability, medical condition, sexual orientation, educational background, marital or domestic partnership status, pregnancy or childbirth, veteran status, citizenship status, ancestry, financial status, or any other personal characteristic protected by applicable law.
We actively encourage candidates from all backgrounds to apply and bring their unique perspectives to our teams. We are committed to ensuring an accessible and inclusive experience for all applicants.
Together, we rise by embracing differences and building a future that reflects the communities we serve.