Senior Consultant - Cybersecurity

This role is REMOTE anywhere in the US. 

UL is seeking a Cybersecurity Expert who will be involved with the cybersecurity work product development for various complex software-intensive systems such as systems for self-driving vehicles, industrial automation, battery and energy storage in both mobile and stationary applications etc. The Expert will lead the development, or review of work products for clients seeking compliance to standards in cybersecurity and related fields, including ISO 21434, ISO 24089, and other similar standards relevant to product, system, hardware, and software engineering safety lifecycle.

Cybersecurity Expert Responsibilities:

• Lead the development of ISO/SAE 21434:2021 processes and templates.
• Lead the development of ISO/SAE 21434:2021 work-products such as TARA, Cybersecurity goal and claims, Cybersecurity concept, Cybersecurity specification, Cybersecurity verification specification, Cybersecurity assessment report, Cybersecurity validation report, Cybersecurity case. 
• Lead the development of ISO 24089:2023 processes and templates.
• Lead the development of ISO 24089:2023 work-products such as Software Update Infrastructure Management Report, Software Update Cybersecurity Risk Analysis Report, Software Update Safety and Cybersecurity Risk Analysis Report, Software Update Vehicle Function Management Report.
• Lead the creation of processes for UN Regulations No. 155 and 156.

Additional Responsibilities:

• Lead business development activities defining Statements of Work (SOWs), providing budgetary estimates, and submitting full proposals for client-funded projects.  Leverage industry experience and network to win projects and build the business.
• Lead client programs, including major/large-scale client programs, by interacting regularly with clients in technical program meetings and project reviews.  Address client concerns and to resolve client issues. Provide expert technical leadership and guidance to clients in reference to related technical fields.  Projects may include regular travel to client sites and to other UL locations.
• Contribute to the strategic direction of the business by providing technical and market expertise to management planning and report-out activities.
• Contribute to the development of UL technical standards and other relevant technical standards (from ISO, IEC, IEEE, SAE, etc.) by direct participation as member of standards committees.

• Master's degree in Electrical, Electronics, Computer Science, Mechanical, Automotive, Robotics, Software or Mechatronics Engineering.
• Required: Experience with ISO 21434, Cybersecurity Management Systems (CSMS), Automotive Cybersecurity Risk Management, Continuous Cybersecurity Activities (Incident Response, Cybersecurity Monitoring)
• Preferred: Additional experience with security controls at the vehicle level, secure onboard communication, secure boot, network segmentation, secure coding practices, and secure architecture practices.
  • Experience with secure automotive topics such as:
    • Secure vehicle architecture and frameworks
    • Secure development processes (ASPICE for Cybersecurity, NIST Cybersecurity Framework, ISO 27001, OWASP)
    • Security testing for automotive- Penetration testing, vulnerability scanning, fuzz testing, dynamic/static application security testing, design review
    • Software supply chain security- Distributed development, vendor security assessments, secure software supply chain risk management
  • Experience with ISO 24089, Software Update Management Systems (SUMS), including experience with vehicle software update campaigns and securing vehicle infrastructure related to software updates. 

What you’ll experience working for ULS 

UL Solutions has been pioneering change since 1894 and we’re still leading the way. From day one, we’ve blazed a trail protecting the planet and everyone on it. Our teams have influenced billions of products, plus services, software offerings and more. We break things, burn things and blow things up. All in the name of safety science. 

That’s where you come in — because none of it could happen without you. It takes passion to protect people, problem-solving to safeguard personal data and conviction to make the world a more sustainable place. It takes bold ideas and brilliant minds to build a better world for future generations across the globe.  

This is more than a job. It’s a calling. A passion to use our expertise and play our part in creating a more secure, sustainable world today — and tomorrow. As a member of our safety science community, you’ll use your ideas, your energy and your ambition to innovate, challenge and ultimately, help create a safer world. 

Everyone here is unique. But we’re also