Product Security Lead

Product Security Lead (LiDAR)

About us

Luminar Technologies Inc. (Nasdaq: LAZR) is transforming automotive safety and autonomy by delivering the only lidar and associated software that meets the industrys stringent performance safety and economic requirements. Luminar has rapidly gained over 50 industry partners including a majority of the top global automotive OEMs. In 2020 Luminar signed the industrys first production deal for autonomous consumer vehicles with Volvo Cars which now expects to make Luminars technology part of the standard safety package on their next generation electric SUV. Additional customer wins include Mercedes SAIC Daimler Truck AG Intels Mobileye Pony.ai and Airbus UpNext. Founded in 2012 Luminar employs approximately 400 with offices in Palo Alto Orlando Colorado Springs Detroit Bangalore and Munich.

For more information please visit www.luminartech

About the role

Luminar Technologies is seeking an experienced technically handson senior manager to be a Product Security Engineer (LiDAR) Lead reporting to the Head of Security Engineering who can design build monitor and enforce the security processes and infrastructure for advanced LiDAR products within a growing US public company. The ideal candidate should have extensive experience in designing security solutions which protect information from threats ensuring business continuity and regulatory compliance by collaboratively working across the different functions in the organization.

This is a first set of lead hires for this function as we look to augment this function at Luminar Bangalore. You will be part of a high crossfunctional team and responsible for rapid prototyping and product development at Luminar.

Responsibilities

• Build and lead a bestinclass product security program for both Lidar and Perception development initiatives
• Lead and manage all activities of product security engineers and analysts
• Partner with key stakeholders including: IT Advanced manufacturing LiDAR Product Software and Customer teams to ensure business outcomes are met ontime on budget in a safe secure manner
• Work closely with Product & Software Perception teams as the primary security advisor and embedded security subject matter expert on all product and project teams
• Support internal & external audits as a subject matter expert
• Manage cybersecurity tasks and timing in overall project management plan
• Manage the development of processes and work product content according to ISO/SAE 21434 including Item Definition Cybersecurity Plan TARA Cybersecurity Concept System HW and SW Vulnerability Analyses
• Manage thirdparty contractors developing and converting existing work products
• Support development of cybersecurity concept specifications and the implementation of embedded system risk treatments including secure boot secure flash and secure communications (using message authentication codes)
• Partner with Legal and Supply Chain teams to develop implement and maintain a worldclass supply chain security & resilience program for our core LiDAR & Perception product lines
• Ensure compliance to secure coding standards
• Support the planning and implementation of cybersecurity risk treatments in manufacturing and production including strategy for key management as well as analyzing network security and other IT risk treatments via a manufacturing TARA
• Support meetings and communication on cybersecurity content with customers
• Work as part of a crossfunctional team with other customer program members and roles to complete work products and implement cybersecurity risk treatments

Required Skills and Qualifications

• Bachelors of Science degree in Computer Science Electrical Engineering Cybersecurity Systems Engineering or a related field (or documented relevant work experience)

• 10 years of managerial experience and documented technical proficiency in product security or a combination of general cybersecurity experience and handson technical experience with products in technology automotive or manufacturing sectors
• Deep knowledge and proven technical proficiency in international standards and critical security technologies to include: ISO/SAE 21434 & 2700X NIST cryptography hardware software interface security ZeroTrust design & frameworks product security risks and risk treatments
• Deep domain expertise in implementation of basic product security risk treatments including secure boot secure flash secure communications including SecOC or MACSec
• Experience with agile engineering processes
• Deep system and software expertise and documented technical proficiency with product security & cybersecurity at a management and engineering level
• Experience with other quality processes (ASPICE ISO 26262 AUTOSAR)

• Experience with agile engineering processes

• Excellent interpersonal verbal and written communication skills and ability to motivate others drive collaboration and quickly resolve conflicts
• Enjoy working within a dynamic and continuously evolving environment
• Strong problemsolving and troubleshooting skills with the ability to diagnose and resolve complex technical issues
• Ability & willingness to work in a 24/7 oncall capacity in emergencies across global time zones
• Highly selfmotivated and directed with attention to detail
• Nativelevel professional English fluency required additional language ability a plus
• Valid passport with no restrictions on business travel to Luminars areas of operation
• Travel up to 10 (according to relevant national and international COVID19 safety guidelines)

Preferred Qualifications

• 7 years of general automotive engineering experience
• Experience with cryptographic key management in a production environment
• Experience with sensors and perception
• Experience with trust anchors e.g. Hardware Security Modules from multiple semiconductor vendors
• Experience working with semiconductor and software suppliers on cybersecurity requirements
• Experience working with cybersecurity service providers and contractors
• Extensive experience in C for safetycritical applications; prefer ADAS or highly autonomous vehicle software experience.
• Strong software engineering experience in vehicle safety critical embedded systems
• Demonstrated experience in embedded software testing as it pertains to automotive safetycritical software.
• Experience in structural coverage of code static and dynamic analysis .
• Show outofbox thinking and invent creative solutions for challenging problems.