Technical Project Manager Automotive Cybersecurity (f/m/x)

At BMW Car IT, a wholly owned subsidiary of BMW AG, we live and breathe software. We design and implement embedded software for electronic control units of the BMW cars as well as related tools and frameworks. 

The infotainment system, with its many external interfaces (e.g., LTE, WiFi, Bluetooth, USB) and high software complexity, has a large attack surface. We, as automotive security engineers, work passionately to protect our cars from attackers.

 

As a Technical Project Manager, we need your help in securing the infotainment system against attacks, regardless of whether they come over the air or require physical access to the vehicle.

 

What awaits you?

• As part of our engineering team, you will solve challenging problems to shape the future of automotive security and make BMW products even more secure.
• You will work together with our suppliers to coordinate feature deliveries and ensure delivery quality as well as timely defect management.
• In collaboration with the development teams, you create and improve feature validation strategies, test plans and supervise their execution.
• You develop and implement a long-term maintenance strategy for ECUs in the infotainment area to ensure that older products keep being secure over the lifetime of a car.
• Due to the high complexity of modern connected cars, you can apply your overview of security topics – in particular: hardware security, operating system security, application security, cryptography, and other security domains.
• You define and manage penetration tests (and code reviews) performed by BMW’s suppliers and external partners.
• You are in constant exchange with program management about the status and progress of project activities.
• You form part of BMW’s security community and help us spread and adopt best practices across different technical domains.

 

What should you bring along?

• University degree in computer science or a comparable field of study, ideally with a security focus.
• Experience with software project management in multi-stakeholder projects.
• A good overview and systematic understanding of Linux/Android systems
• Overview of security principles, latest techniques, and operating system features (for example, secure boot, disk encryption, integrity protection, Linux kernel hardening).
• Understanding of CVEs/CVE handling, particularly for open-source software.
• Knowledge of a scripting language to automate tasks.
• You are a strong communicator, who can convince others of the importance of security activities.
• A background in penetration testing or security engineering may be beneficial but is not required.
• Business-fluent English is required, German would be an advantage.