Cyber Security Architect (all levels) - Infotainment Platform - in Berlin (remotely in Germany) in Berlin bei MBition GmbH

At MBition, we are bringing digital luxury to mobility users around the world. To accomplish this, we are redefining how software is developed within the automotive field as part of an international Mercedes-Benz software development network. As a 100% subsidiary of Mercedes-Benz AG, we develop and integrate the next generation of Mercedes-Benz in-car infotainment systems that are based on the Mercedes-Benz Operating System (MBOS). In addition, we are responsible for the Mercedes me companion app, we provide seamless & connected mobility experiences and we contribute to Advanced Driver Assistance Systems (ADAS) platform development.

About the role

• In this role, you will be working as Security Architect in the platform development for future Multi-SoC and Multi-OS infotainment systems.
• You will be working with very talented group of builders (Software Engineers), breakers (Security Engineers) and designers (Software Architects) to make our product and software platform more secure
• You will be directly contributing to the strategic direction of security relevant components and activities that will pave the way for secure Mercedes-Benz Operating System (MBOS)
• You will be orchestrating security design decisions across different feature verticals to ensure robust and secure posture in our products
• You will drive the design and implementation of security components and features across multiple layers of our Linux-based platform
• Identify threats and risks of our system components using any suitable approach (e.g. TARA, threat modeling)
• Suggest security controls and countermeasures to mitigate identified threats and risks
• Together with security engineers and cyber security compliance manager, work closely with process improvement team to set up the standards and processes for product security & privacy in our Product Development Life Cycle Process
• Work closely with different stakeholders to build and establish “security culture” in the organization through different activities and initiatives in order to make “Security by Design” and “Privacy by Default” principles as an integral part of our product development.

Your Profile

Education

• Degree in Computer Science, Information Technology, Electrical Engineering or a comparable qualification. An MSc or PhD with Cyber Security specialization will be a huge plus.

Experience

• First experience of working as security engineer or software engineer (preferably Linux security)
• Experience in performing TARAs and creating security concepts for automotive ECUs (preferably infotainment ECU)
• Very good understanding of different cryptographic algorithms, protocols and their applications
• Hands-on experience of working with Linux/Unix-like system

Nice to have

• Familiarity with one (or more) low level architecture (preferably ARM and RISCV)
• Familiarity with security related automotive standards like UNECE WP29 (R155, R156) and ISO 21434
• Familiarity with open source licenses and/or being a contributor to open source Projects
• Proficiency in shell scripting, Python, C and C++
• Knowledge on secure coding best practices
• Good understanding of at least one of the well-known Linux Security Modules (Apparmor, SELinux, SMACK, TOMOYO)
• Good understanding of Linux security mechanisms like Discretionary Access Control, Access Control Lists, Linux Capabilities, CGROUPS, namespaces, seccomp
• Familiarity with different kernel hardening mechanisms and Linux kernel hardening projects like grsecurity, Kernel Self Protection
• Familiarity with secure boot mechanism and Trustzone in ARM-based SoC
• Familiarity with low level inner-working of operating systems (preferably on Linux or Unix-like system)
• Basic understanding of privacy enhancing technologies and privacy regulations (e.g. GDPR)

Personal skills

• P