Lead Cyber Security Architect - Products

The role

Dyson’s Cyber Security team have a key role to play, as we:

·       Enable the successful delivery of exciting new products.

·       Manage the digital security of our products.

·       Help development teams to adopt Security Best Practice.

·       Ensure products meet relevant Cybersecurity Regulations.

In this role you will,

·       Ensure that Dyson’s products and the ecosystems they connect to are secure.

·       Ensure that Dyson’s products and the ecosystems they connect to comply with relevant Cybersecurity Regulations.

·       Assist in the security architecture and governance for Dyson’s connected consumer / IoT devices at all project stages; from setting security requirements, defining product security guidelines and principles, through to evaluating risk and overseeing assurance activities.

·       Set the direction for our engineering teams to deliver against, capturing and articulating cyber security risk, and providing consultancy services to our stakeholders in product development.

·       Plan, research, design and build robust security architectures for new projects.

·       Improve efficiency, automation and performance of security, reducing cost of ownership and driving quality, security and speed.

·       Engage with new business initiatives – delivering secure, supportable solutions.

·       Provide security risk assessment and recommendations throughout the delivery lifecycle - produce designs, define patterns and engage with delivery.

About you

Looking for a cybersecurity challenge that will test your skills and push your boundaries? Join our team as a Product/IoT Security specialist, where you will be responsible for the security of exciting new products that Dyson is developing and deploying.

To succeed in this role you should,

·       Have a solid background in product development (hardware or embedded software) or security architecture of IOT/OT platforms, with knowledge of current industry security threats, challenges, and mitigation.

·       Have a good understanding of security techniques for securing devices and communications with them, such as authentication, encryption, integrity checking and establishing a root of trust.

·       Have Chinese (Mandarin) as a 1st or 2nd language, with the ability to read and understand technical documents written in Chinese and speak with partners based in China on deeply technical topics.

·       Have a good understanding of current and emerging IoT Cybersecurity Regulations and Standards (EU-RED, EU-CRA, EN 18031, EN 303 645).

·       Understand current industry best practice and guidance for securing IoT devices.

·       Have knowledge of Real Time Operating Systems.

·       Understand Microprocessor and Microcontroller architectures and their security features.

·       Be familiar with System-on-Chip devices (e.g. Bluetooth/WiFi) and their associated software stacks.

·       Understand Secure Software Download.

·       Be familiar with Threat Modelling.

·       Be experienced in Security Risk Assessment.

·       Have the ability to quickly learn new technologies and architectures and identify potential security weaknesses.

·       Be familiar with Security Requirements for standalone and connected products.

·       Have knowledge of Embedded Software Languages and the Software Development Lifecycle.

·       Understand common attack vectors and how to minimise the threats they pose.

·       Keep abreast of product security advisories, alerts, security trends and practices.

·       Understand how to Identify and remediate vulnerabilities in Open Source Software.

·       Have the ability to rapidly learn deeply technical subjects related to product security, and an ability to keep abreast of security impacts to fast moving industries, such as the consumer electronic device industry.

Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity.