Embedded Product Cybersecurity Expert / ISO 21434, IEC 62443

Location: Saint-Laurent, Quebec, Canada; hybrid work arrangement. Only Canadian citizens and permanent residents will be contacted.

Company

CS Group Canada, a subsidiary of CS Group within the Sopra Steria Group, develops and certifies safety-critical systems for aerospace, electric, and autonomous driving industries.

What you will do

• Assess vehicle and ECU system architectures using TARA and identify critical assets, attack vectors, threat scenarios, and associated risks.
• Define cybersecurity goals, claims, and requirements for hardware, firmware, and system-level designs, maintaining lifecycle traceability.
• Contribute to cybersecurity concepts aligned with ISO/SAE 21434 and applicable regulatory requirements.
• Collaborate with software, hardware, and systems engineers to integrate secure boot, cryptography, secure communication, key management, hardware roots of trust, debug protections, and secure updates.
• Evaluate communication protocols and recommend authentication, encryption, replay protection, secure pairing, and key-management countermeasures.
• Support cybersecurity validation, audits, technical reviews, and compliance documentation.

Requirements

• Bachelor’s or Master’s degree in software, electrical, computer, automotive engineering, or a related field.
• 3–10 years of experience in automotive or embedded systems cybersecurity, including hands-on ISO/SAE 21434 TARA experience.
• Strong knowledge of embedded architectures, MCU/SoC constraints, real-time systems, and Linux-based environments.
• Experience with boot architectures and low-level debugging through JTAG, XCP, and SWD.
• Knowledge of automotive and embedded communication protocols, including CAN, CAN-FD, Automotive Ethernet, SOME/IP, UDS, UART, SPI, Bluetooth, Wi-Fi, USB, NFC, cellular, and RF.
• Excellent analytical, problem-solving, documentation, and multidisciplinary collaboration skills.

Nice to have

• Experience with safety-critical ECUs and embedded systems.
• Hands-on cybersecurity validation, fuzzing, robustness testing, or penetration testing experience.
• Knowledge of cybersecurity cases, audits, UNECE R155/R156, CRA, IEC 62443, TPM, Secure Element, HSM, TrustZone, MPU/MMU, SBOM, and PSIRT processes.

Culture & Benefits

• Full-time, permanent employment with hybrid work.
• Medical, dental, and vision insurance.
• Telemedicine access, RRSP program, personal days, and sick days.
• Recreation room with pool table and foosball table.
• Commitment to workplace diversity and inclusion.