Job Description
General information
Location
Bangalore - Karnataka, India - Kalyani Platina
Job Family:
Engineering
Worker Type Reference:
Regular - Permanent
Pay Rate Type:
Salary
Career Level:
T4(A)
Job ID:
R-55544-2026
Apply
Description & Requirements
Introduction: A Career at HARMAN Automotive
We’re a global, multi-disciplinary team that’s putting the innovative power of technology to work and transforming tomorrow. At HARMAN Automotive, we give you the keys to fast-track your career.
- Engineer audio systems and integrated technology platforms that augment the driving experience
- Combine ingenuity, in-depth research, and a spirit of collaboration with design and engineering excellence
- Advance in-vehicle infotainment, safety, efficiency, and enjoyment
About the Role
As an Automotive Cybersecurity Architect, you will define and guide cybersecurity concepts and architectures for connected vehicle systems, including Android Automotive and Linux-based infotainment platforms, telematics, connectivity, and supporting backend services. You will translate cybersecurity risks, regulatory obligations, and product requirements into implementable controls, engineering work products, and compliance evidence. You will collaborate with systems, software, hardware, validation, quality, and program teams to ensure cybersecurity is addressed throughout the product lifecycle. This is an individual contributor role, and the reporting relationship is to be confirmed.
What You Will Do
- Develop and maintain cybersecurity concepts, cybersecurity requirements, security architectures, interface specifications, and verification criteria for automotive products.
- Plan, facilitate, document, and maintain Threat Analysis and Risk Assessment activities, including asset identification, attack-path analysis, impact assessment, risk determination, cybersecurity goals, and risk-treatment decisions.
- Create, review, and maintain applicable ISO/SAE 21434 work products, ensuring bidirectional traceability between identified risks, cybersecurity goals, requirements, architecture decisions, implemented controls, verification evidence, and residual-risk decisions.
- Perform cybersecurity architecture reviews and provide actionable guidance to system, software, hardware, cloud, and validation teams.
- Define security controls for Android Automotive and Linux-based IVI systems, including secure boot, chain of trust, SELinux policy, application sandboxing, Trusted Execution Environment integration, Trusted Applications, key protection, and secure storage.
- Define and review cryptographic designs involving PKI, certificate and key lifecycle management, authentication, authorization, encryption, TLS/SSL, OpenSSL, JSSE, and secure communications.
- Define security controls for telematics and connected systems, including connectivity, diagnostics, vehicle-to-backend communication, OTA software updates, software authenticity, integrity validation, rollback protection, and secure update authorization.
- Support implementation of Cybersecurity Management System processes and product evidence needed for UNECE R155 compliance, cybersecurity audits, assessments, and Vehicle Type Approval activities.
- Support Software Update Management System processes and product evidence needed for UNECE R156 compliance, including software update governance, update traceability, integrity and authenticity controls, compatibility assessment, and update verification evidence.
- Contribute to cybersecurity case development by consolidating requirements, analyses, architecture decisions, test results, vulnerability information, open risks, assumptions, deviations, and residual-risk acceptance evidence.
- Support cybersecurity planning, cybersecurity interface agreements, supplier cybersecurity reviews, distributed-development coordination, and review of supplier-provided cybersecurity evidence.
- Define cybersecurity verification and validation strategies, including security requirements testing, robustness testing, vulnerability scanning, fuzz testing, penetration-testing support, and remediation verification.
- Assess vulnerabilities and coordinate their treatment through triage, applicability analysis, risk evaluation, remediation planning, security patch integration, verification, disclosure coordination, and post-production monitoring.
- Support incident-response readiness and product cybersecurity monitoring by defining logging, detection, escalation, investigation, containment, and evidence-retention expectations.
- Review backend and API security controls, including identity and access management, authentication, authorization, encryption, secrets management, secure API design, logging, monitoring, and cloud security fundamentals.
- Support alignment between automotive product cybersecurity activities and relevant ISO/IEC 27001 controls where product, development, operational, or backend environments intersect with the organizational information security management system.
- Prepare and present cybersecurity status, risks, assumptions, compliance gaps, remediation plans, and technical decisions to engineering and program stakeholders.
- Support internal and external cybersecurity assessments by providing objective evidence, responding to findings, and tracking corrective actions to closure.
- Promote security-by-design practices, reusable security patterns, secure engineering guidance, and lessons learned across automotive development teams.
What You Need to Be Successful
- Bachelor’s degree in computer science, cybersecurity, electrical engineering, software engineering, telecommunications, or a related technical discipline.
- Professional experience in automotive cybersecurity, embedded security, product security, or security architecture. The required number of years is to be confirmed.
- Hands-on experience applying ISO/SAE 21434 within an automotive product lifecycle and producing or reviewing cybersecurity engineering work products.
- Practical experience conducting and documenting TARA activities and deriving cybersecurity goals, claims, requirements, and risk-treatment measures.
- Working knowledge of UNECE R155, CSMS expectations, audit evidence, and cybersecurity contributions to Vehicle Type Approval.
- Working knowledge of UNECE R156, SUMS expectations, and security considerations for automotive software update and OTA processes.
- Experience developing or reviewing cybersecurity concepts, system security architectures, cybersecurity requirements, design decisions, interface controls, and verification strategies.
- Strong understanding of embedded and connected-system security, including secure boot, roots of trust, hardware-backed key storage, Trusted Execution Environments, cryptography, PKI, authentication, authorization, secure communications, and secure diagnostics.
- Knowledge of Android Automotive or Android platform security, including SELinux, application permissions, sandboxing, keystore concepts, Trusted Applications, JSSE, and platform update security.
- Knowledge of Linux security concepts, including access control, privilege separation, hardening, service isolation, secure configuration, logging, and OpenSSL-based communications.
- Understanding of telematics, connected-vehicle interfaces, OTA systems, vehicle-to-cloud communication, and backend or API security fundamentals.
- Experience with cybersecurity verification methods such as security testing, vulnerability analysis, fuzz testing, penetration-testing coordination, and remediation verification.
- Ability to establish and maintain requirements-to-test and risk-to-control traceability using structured engineering lifecycle processes.
- Ability to assess technical findings, communicate risk accurately, and recommend proportionate mitigations without losing sight of product, safety, usability, performance, and delivery constraints.
- Strong written and verbal communication skills, with the ability to explain cybersecurity topics to engineering, management, quality, compliance, and non-security stakeholders.
- Working proficiency in English.
Bonus Points if You Have
- Master’s degree in cybersecurity, computer science, electrical engineering, software engineering, or a related discipline.
- Recognized cybersecurity certifications such as CISSP, CSSLP, CCSP, OSCP, or an automotive cybersecurity certification.
- Experience supporting Certification Authorities, technical services, OEM compliance teams, or approval authorities during CSMS, SUMS, UNECE R155, UNECE R156, or Vehicle Type Approval activities.
- Experience with ISO 24089 software update engineering, ISO 26262 functional safety, Automotive SPICE, TISAX, or ISO/IEC 27001.
- Experience creating cybersecurity cases, assurance arguments, compliance matrices, audit packages, or release-readiness evidence.
- Experience with hardware security modules, secure elements, TPMs, TrustZone, hypervisors, domain isolation, secure provisioning, code signing, or manufacturing security.
- Experience securing automotive communication technologies and protocols such as CAN, LIN, Automotive Ethernet, SOME/IP, DoIP, UDS, Bluetooth, Wi-Fi, cellular, or GNSS-related services.
- Experience with software composition analysis, Software Bill of Materials, open-source compliance, vulnerability management, security scanning, or DevSecOps integration.
- Experience with cloud security, connected-vehicle backends, API gateways, IAM, OAuth 2.0, OpenID Connect, certificate management, or security monitoring.
- Experience collaborating with globally distributed engineering teams, suppliers, third-party laboratories, or independent cybersecurity assessors.
What Makes You Eligible
- You are eligible to work in the country of employment. Country and any applicable work-authorization requirements are to be confirmed.
- You are able to work from the designated HARMAN or customer location when required. Location and hybrid-working expectations are to be confirmed.
- You are willing to travel as required. Expected travel frequency is to be confirmed.
- You can collaborate effectively across global time zones when program activities require it.
What We Offer
- A hybrid work environment that balances flexibility with in-person collaboration, with most office-based roles onsite three days a week.
- Access to employee discounts on world-class Harman and Samsung products (JBL, HARMAN Kardon, AKG, etc.)
- Extensive training opportunities through our own HARMAN University
- Competitive wellness benefits
- Tuition reimbursement
- “Be Brilliant” employee recognition and rewards program
- An inclusive and diverse work environment that fosters and encourages professional and personal development
About HARMAN: Where Innovation Unleashes Next-Level Technology
Ever since the 1920s, we’ve been amplifying the sense of sound. Today, that legacy endures, with integrated technology platforms that make the world smarter, safer, and more connected.
Across automotive, lifestyle, and digital transformation solutions, we create innovative technologies that turn ordinary moments into extraordinary experiences. Our renowned automotive and lifestyle solutions can be found everywhere, from the music we play in our cars and homes to venues that feature today’s most sought-after performers, while our digital transformation solutions serve humanity by addressing the world’s ever-evolving needs and demands. Marketing our award-winning portfolio under 16 iconic brands, such as JBL, Mark Levinson, and Revel, we set ourselves apart by exceeding the highest engineering and design standards for our customers, our partners and each other.
If you’re ready to innovate and do work that makes a lasting impact, join our talent community today!
Important Notice: Recruitment Scams
Please be aware that HARMAN recruiters will always communicate with you from an '@harman.com', ‘@careers.harman.com’ or ‘@harmanglobal.avature.net’ email address. We will never ask for payments, banking, credit card, personal financial information or access to your LinkedIn/email account during the screening, interview, or recruitment process. If you are asked for such information or receive communication from an email address not ending in one of the above email domains about a job with HARMAN, please cease communication immediately and report the incident to us through: harmancareers@harman.com.
You Belong Here
HARMAN is committed to making every employee feel welcomed, valued, and empowered. No matter what role you play, we encourage you to share your ideas, voice your distinct perspective, and bring your whole self with you – all within a support-minded culture that celebrates what makes each of us unique. We also recognize that learning is a lifelong pursuit and want you to flourish. We proudly offer added opportunities for training, development, and continuing education, further empowering you to live the career you want.
HARMAN is proud to be an Equal Opportunity employer. HARMAN strives to hire the best qualified candidates and is committed to building a workforce representative of the diverse marketplaces and communities of our global colleagues and customers. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. HARMAN attracts, hires, and develops employees based on merit, qualifications and job-related performance.(www.harman.com)
HARMAN is committed to providing reasonable accommodations to applicants with disabilities. If you need assistance or an accommodation during the application process, please contact us at harmancareers@harman.com. Requests will be considered on a case-by-case basis in accordance with applicable law.
Apply
