Product Cybersecurity & Embedded Systems Security Engineer

The mission of the LGM Group is to design unique innovative solutions (products, organizational, or technological) for large industrial groups, aiming to enhance the performance of large complex systems and infrastructures during operational and maintenance phases.LGM Group is the historical entity of the Group, where everything started more than 30 years ago. Today, LGM comprises approximately 1500 employees, both in France and internationally, who analyze, optimize, and manage the design, operation, and maintenance of complex systems.We are looking for a Product Cybersecurity Engineer to support its clients in designing, developing and maintaining secure products and systems. You will help integrate cybersecurity throughout the product lifecycle, working closely with systems, software, hardware, validation and functional safety teams.Plan product cybersecurity activities and define project deliverables.Perform Threat Analysis and Risk Assessment (TARA), identify attack scenarios and recommend risk mitigation measures.Define cybersecurity goals and requirements, allocate them to system, software and hardware components, and maintain traceability.Participate in architecture and design reviews to embed security principles.Determine or assess protection mechanisms.Support development teams in applying secure development practices and assessing third-party and open-source components.Describe cybersecurity verification and validation activities, assess test results and track corrective actions.Evaluate vulnerabilities and the security impact of product changes, and support the treatment of residual risks.Review supplier deliverables and prepare analyses, reports and evidence demonstrating compliance with cybersecurity requirements.Coordinate cybersecurity and functional safety interfaces to ensure consistent protection measures.Bachelor’s degree in computer, software, electrical or systems engineering, or a related discipline.Relevant experience in product cybersecurity, embedded systems security or industrial systems security.Ability to assess complex architectures, interfaces and attack surfaces.Experience in risk assessment, threat modelling and cybersecurity requirements development.Knowledge of one or more applicable standards, depending on the industry:
ISO/SAE 21434: cybersecurity engineering for road vehicles.IEC 62443, particularly Parts 4-1 and 4-2: secure development and security requirements for industrial components.
Sound understanding of communication protocols, embedded operating systems and applied cryptography principles.Strong analytical skills, attention to detail and the ability to work independently and with multidisciplinary teams.
#J-18808-Ljbffr