Senior Cybersecurity Engineer, AV Cybersecurity

About the role

The Centre for Autonomous Mobility (CAM) leads Singapore's national effort to deploy autonomous vehicles (AVs) at scale. Its cybersecurity team is building the cybersecurity assurance regime for AVs, ensuring they are deployed safely and securely. This role helps build the function from the ground up, covering AV cybersecurity itself and the security of the systems CAM builds to oversee them.

Key responsibilities

• Drive the regulatory framework for AVs, such as requirements for a Cyber Security Management System (CSMS) covering development, production and deployment.
• Assess AV developers' cybersecurity submissions against assurance criteria using Threat Analysis and Risk Assessment (TARA), R155 Annex 5, and standards such as ISO/SAE 21434.
• Define expectations for secure over-the-air software updates in line with UN R156 and manage cyber risk across the AV supply chain.
• Establish monitoring, detection and incident response requirements, and maintain policies, standards and playbooks; engage with partners and international fora such as UNECE WP.29 / GRVA.
• Integrate security into the software development lifecycle with the Systems team, conduct security architecture reviews and risk assessments, and set up automated security testing (SAST/DAST, dependency and secrets scanning, IaC checks).
• Support breach detection and incident response for CAM's products, and advise project teams on design and architecture.
• For a senior hire: own the AV cybersecurity assurance framework end to end, lead assessments of AV developers' cybersecurity management systems, lead incident response for the AV fleet, mentor junior engineers and help build security architecture governance.

Required profile

• Knowledge preferably in Computer Science, Cybersecurity or a related field.
• Analytical thinking about risk and ability to explain security issues to technical and non-technical audiences.
• Eagerness to learn vehicle regulations and standards such as R155 and R156.
• Familiarity with automotive cybersecurity standards (UN R155, R156, ISO/SAE 21434, CSMS, TARA) or a track record of learning them quickly.
• Exposure to automotive, OT or embedded/safety-critical systems security, including cloud-native application security.
• Professional accreditations such as CISSP, CISM, CRISC, GICSP, GCIH or OSCP.

Required skills

• Hands-on DevSecOps experience: secure SDLC, CI/CD pipeline security, cloud security (e.g. AWS), SAST/DAST tooling.
• Experience with security tools such as SIEM, WAF, IPS, PAM or DLP.