onsite
Security Engineer Vehicle Network - 42dot
Security Engineer
Security Engineer focused on protecting vehicle internal and external networks. Design and implement MACsec, WireGuard VPN, and Secure CAN authentication, ensuring performance and reliability in automotive SDV environments.
About the role
Key Responsibilities
- Develop and integrate MACsec (IEEE 802.1AE) for vehicle Ethernet segments.
- Implement WireGuard‑based VPN tunnels between vehicle and cloud, including operational logic.
- Design Secure CAN protocols, providing authentication and integrity protection.
- Implement key management for MACsec (MKA), WireGuard, and Secure CAN, including authentication logic.
- Validate and test security boundaries during OTA/Telematics integration, covering Ethernet/CAN to WAN interfaces.
Requirements
- Proven experience developing C/C++ network and security modules on Linux.
- Deep understanding of MACsec or other L2 security mechanisms.
- Hands‑on knowledge of WireGuard or kernel‑level VPN implementations.
- Experience with automotive communication protocols, especially CAN security.
- Strong analytical skills to assess encryption performance impacts and design production‑ready architectures.