Principal Engineer - Automotive Cyber Security

HARMAN’s engineers and designers are creative, purposeful and agile. As part of this team, you’ll combine your technical expertise with innovative ideas to help drive cutting-edge solutions in the car, enterprise and connected ecosystem. Every day, you will push the boundaries of creative design, and HARMAN is committed to providing you with the opportunities, innovative technologies and resources to build a successful career.

A Career at HARMAN

As a technology leader that is rapidly on the move, HARMAN is filled with people who are focused on making life better. Innovation, inclusivity and teamwork are a part of our DNA. When you add that to the challenges we take on and solve together, you’ll discover that at HARMAN you can grow, make a difference and be proud of the work you do everyday.

About the Role

Software Engineer for Embedded Security is responsible for the architecture, design, development, integration, and validation of security solutions across Android and Embedded Linux platforms. This role provides technical leadership and strategic direction for platform security, focusing on Software Security, Secure Boot, Trusted Execution Environments (TEE), Secure Storage, Key Management, and compliance with automotive cybersecurity standards. The position collaborates closely with OEMs, SoC vendors, security teams, and cross-functional stakeholders to deliver robust and secure automotive platforms.

What You Will Do

• Architect, design, develop, and integrate embedded security solutions for Android and Embedded Linux platforms.
• Own and maintain security components across Rich OS and Secure World environments.
• Implement, optimize, and troubleshoot Android security features including Keystore/Keystore2, SELinux, Android Verified Boot (AVB), and security-related system services.
• Develop and harden Embedded Linux security solutions, including Secure Boot, kernel security configurations, and Linux Security Modules (LSMs).
• Integrate, validate, and support TrustZone/TEE solutions using GlobalPlatform standards and APIs.
• Enable secure storage solutions such as RPMB, Secure File Systems (SFS), and hardware-backed key storage.
• Drive key provisioning, cryptographic services, encryption, certificate management, and key lifecycle management.
• Support OTP memory access and security-critical OEM-specific configurations such as ECU identifiers.
• Lead security testing, vulnerability assessments, production build validation, and system stabilization activities.
• Collaborate with SoC vendors, TEE vendors, OEMs, and cross-functional teams to resolve complex security challenges.
• Ensure compliance with automotive cybersecurity standards, customer requirements, and internal security specifications.
• Define and drive the security architecture, technical roadmap, and strategic direction for Android and Embedded Linux platforms.
• Lead technical reviews, architecture discussions, security risk assessments, and design decision governance across programs.
• Mentor and guide engineering teams on security best practices, implementation strategies, and advanced troubleshooting techniques.
• Act as the primary technical interface for customers, OEMs, suppliers, and cybersecurity stakeholders.
• Drive root cause analysis and resolution of complex security issues spanning bootloader, kernel, framework, middleware, and TEE layers.
• Lead cybersecurity compliance initiatives, including TARA, security audits, customer assessments, and regulatory compliance activities.

What You Need to be Successful

• Proven experience in automotive embedded systems and platform security.
• Strong understanding of ISO/SAE 21434 and automotive cybersecurity processes.
• Experience working with OEMs, Tier-1 suppliers, SoC vendors, and ecosystem partners.
• In-depth knowledge of GlobalPlatform specifications and TEE architectures.
• Experience with production, signed, and secure software release processes.
• Strong understanding of cryptography, PKI, certificate management, and security architecture principles.
• Excellent analytical, problem-solving, and debugging capabilities.
• Proven experience leading technical teams and driving architecture decisions in embedded software projects.
• Ability to influence stakeholders and align multiple organizations on technical direction.
• Strong communication and collaboration skills with cross-functional and geographically distributed teams.
• High ownership, accountability, and attention to detail.

What is Nice to Have

• Experience with Qualcomm, NXP, Renesas, or similar automotive SoCs.
• Hands-on experience with OP-TEE, QTEE, or commercial TEE implementations.
• Knowledge of hardware security technologies including HSM, TPM, Secure Elements, and cryptographic accelerators.
• Experience in vulnerability management, CVE assessment, and security patch integration.
• Familiarity with Android Automotive OS (AAOS) and AOSP security architecture.
• Experience with penetration testing, threat modeling, and security assessment tools.
• Knowledge of automotive communication protocols such as CAN, Ethernet, UDS, and SOME/IP from a cybersecurity perspective.
• Experience with CI/CD pipelines and automation for security validation, compliance, and release management.
• Understanding of secure OTA update mechanisms and software signing infrastructure.
• Experience leading globally distributed engineering teams and customer-facing technical engagements.

What Makes You Eligible

• Bachelor's or Master's degree in Computer Science, Electronics, Electrical Engineering, Cybersecurity, or a related field.
• 10+ years of experience in Embedded Linux, Android Security, Automotive Cybersecurity, or a related domain, with demonstrated technical leadership experience.
• Strong programming skills in C/C++ and scripting languages such as Python or Shell.
• Extensive experience with Linux kernel, Android framework, BSPs, device drivers, bootloaders, and platform integration.
• Hands-on experience with Secure Boot, TEE integration, cryptographic services, key management, and secure storage solutions.
• Proficiency with debugging and development tools such as GDB, JTAG, ADB, and Linux tracing utilities.
• Experience with Git, Gerrit, and collaborative software development workflows.
• Ability to thrive in a fast-paced product development environment.
• Strong communication and stakeholder management skills, with the ability to work effectively across global teams and external partners.
• Proven track record of leading complex security programs and delivering production automotive platforms.
• Experience presenting technical solutions, security architectures, and strategic recommendations to senior leadership, customers, and external stakeholders.

What We Offer

• HARMAN FlexConnect Program, offering a flexible hybrid work environment that fosters stronger collaboration, meaningful connections, and innovation through a minimum of three in-office days per week.

• Access to employee discounts on world-class Harman and Samsung products (JBL, HARMAN Kardon, AKG, etc.)
• Extensive training opportunities through our own HARMAN University
• Competitive wellness benefits
• Tuition reimbursement
• “Be Brilliant” employee recognition and rewards program.
• An inclusive and diverse work environment that fosters and encourages professional and personal development.

#LI-MR1

HARMAN is proud to be an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.