Automotive cybersecurity expert

3/2023 – 12/2023

Performing ISO21434-based TARA security analyzes for components, especially Linux kernels
•
Development & review of security concept and architecture
•
Support in requirements analysis/gathering and coordination with the customer
•
Design and implementation of cybersecurity elements such as secure boot, security in BSP, boot loader and Linux kernel as well as IDS etc.
•
Collaboration with embedded architecture, system definition of complex multiprocessor systems and E/E systems.
•
Collaboration with Secure Execution Environments such as Trusted Execution Environment (TEE), Trusted Applications (TAs) and Key Provisioning
•
Secure software development for Android and Linux based platforms
•
Secure software development according to ISO 21434 and ASPICE Level 2
•
Cybersecurity Process Refinement: Cybersecurity Monitoring, Organizational Incident Response, Vulnerability Management

ISO/IEC 15504, Cyber Security, ISO / IEC 27001

12/2022 – 3/2024

Creation of an Actual-State analysis of the existing cybersecurity requirements.
•Creation of a security risk analysis for the BMW and Audi infotainment systems.
•Evaluation of threat scenarios with the help of Yakindu Security Analyst.
•Definition of measures in case of threats based on the previously assessed.
•Threat scenarios an Attack tree creating
•Creation of technical security requirements according to ISO/SAE 21434 and Automotive SPICE.
•Creation of a cybersecurity concept according to ISO/SAE 21434, UNR 155, UNR 156, and Automotive SPICE.
•Creation of detailed technical documentation.
•Process refinement and definition as per ISO/SAE 21434 and Automotive SPICE
•Vulnerability Analysis and Monitoring

Cyber Security, System Architektur, ISO/IEC 15504

7/2021 – 7/2022

• Analyzing potential threats for permission blockchains
• Utilizing different cryptographic primitives for authentication
• Requirements creation based on blockchain
• Developing Cordapp by JAVA to run Cordapp
• Building a testing Network based on Corda
• Supporting HW/SW teams to develop the products based on ISO/SAE 21434 standard
• Performing/evaluating threat analysis and risk assessment
• Design cyber security concept for the product

Cyber Security