Position Title: Cybersecurity Engineer
Location: San Pedro Garza García, N.L. Reports to: Cybersecurity and Functional Safety Manager Mx
The Role:
The Cybersecurity (Systems) Engineer derives, specifies, and verifies cybersecurity requirements and architecture at the system level for low voltage energy storage and power distribution products, ensuring cybersecurity goals from the TARA are traceably realized in the system design in compliance with ISO/SAE *, ASPICE, and UN R155.
What You'll Do (Impact Areas)
Conduct Threat Analysis and Risk Assessment (TARA) at item and component level
derive cybersecurity goals and claims and maintain them across the product lifecycle
Develop the cybersecurity concept and derive cybersecurity requirements at the system level, allocating them to hardware, software, and production elements with full bidirectional traceability
Define and maintain the system-level cybersecurity architecture, including trust boundaries, attack surfaces, and cybersecurity controls (secure boot, secure diagnostics, secure flash, key and certificate handling)
Collaborate with hardware, software, production, and functional safety teams to ensure cybersecurity requirements are correctly interpreted and implemented; support cross-functional and customer technical reviews
Integrate cybersecurity activities into ASPICE SYS.1-SYS.5 base practices and align with ISO * system-level safety requirements and interfaces
Plan and execute cybersecurity verification and validation at the system level, including requirement-based testing, vulnerability analysis, and penetration test scoping; evaluate and disposition findings
Produce and maintain system-level cybersecurity work products for the cybersecurity case, including specifications,



architecture documentation, verification reports, and traceability evidence
Support End Of line configuration to ensure appropriate handling to production
Support vulnerability management and post-production activities, including vulnerability triage, impact analysis, and input to the product incident response process
Support cybersecurity audits and assessments by providing system-level evidence and rationale
What Success Looks Like
For this type of role, success is measured not only by the completion of Cybersecurity work products, but also by compliance, project support, technical leadership, and stakeholder confidence.
Provides clear technical guidance and coaching to cross-functional teams
Cybersecurity requirements are integrated effectively across Systems, Hardware, and Software development activities
Proactively identifying Cybersecurity risks, compliance gaps, and technical issues before they impact project milestones
Demonstrates strong ownership and accountability for Cybersecurity deliverables and decisions
Effectively communicates Cybersecurity concept, risks, and project status to engineering teams, management, customers, and assessors
Core Competencies
Cybersecurity Expertise, applying deep knowledge of ISO */ UN R155 through all lifecycle development
Cybersecurity Analysis & Risk Assessment,



able to execute and supervise TARA or Vulnerabilities Analysis and Management
Systems Engineering; understands complex system architectures and interactions across hardware, software, and systems
Technical leadership and critical thinking; Analyzes complex technical challenges and provides technical direction, guidance, and mentorship towards different Cybersecurity Features
Cross-Functional Collaboration & Communication
What You Bring (Qualifications)
Bachelor's degree in Electrical Engineering, Electronics Engineering, Mechanical Engineering, Mechatronics Engineering, Computer Engineering, or a related technical discipline
Minimum 5 years of experience in Cybersecurity engineering within the automotive industry
Experience in Automotive product development, preferably within Battery Management Systems (BMS), energy storage systems, power electronics, or embedded automotive systems
Demonstrated experience supporting projects across the complete ISO * Cybersecurity lifecycle
Experience working in a Tier-1 supplier and/or OEM environment
Experience with Cybersecurity engineering tools such as: Ansys Medini Analyze, Requirements Management tools (e.g., Jama, DOORS)
Familiarity with systems engineering methodologies and model-based development
Basic understanding of Functional Safety concepts and their interaction with Cybersecurity
Experience working in integral, cross-functional engineering organizations
Certification in functional safety (e.g., TÜV Cybersecurity Engineer) is a plus
Work Model & Travel
Hybrid position based in Monterrey, Mexico, with occasional travel to the United States, Germany, and other locations to support project, customer, and business nee

📌 Cybersecurity Engineer (Monterrey)
🏢 WFMX465 Johnson Controls Enterprises Mexico, de C.V.
📍 Monterrey