Toyota Tsusho Europe

Full-stack Engineer

• Product cybersecurity technical thought leadership in the research, design, development, manufacturing, and/or operations of the Connected, Autonomous, Shared, and Electrified mobility solutions and digital services.
• Creation & facilitation of automotive threat analysis and risk assessment (TARA) for the end-to-end (E2E) vehicle ecosystem (embedded, cloud, mobile app).
• Individual contributor executing the roles and responsibilities of an engineering technical lead across multiple projects, processes, and teams. Support activities include:
• o Working with stakeholders to understand timeline, input/output, dependencies, etc.
• o Technical experience to understand any “impediments” the team may experience
• o Work with external stakeholders to remove “impediments” from the team
• o Hands-on work to complete TARA, system requirements, system reference architectures for E2E vehicle ecosystem
• Creation & facilitation of technical reference architectures to quickly enable biz divisions to implement solutions that align w/ privacy-by-design & security-by-design.
• Execute the roles and responsibilities of an individual contributor across multiple projects and teams independently with very little oversight required.
• Liaise with line of business leaders and general other risk functions to deliver program needs within business units.

Senior Principal Engineer

Application Engineer

• Conduct analysis of security requirements specifications against implementation
• Perform security assessments and penetration testing including but not limited to mobile applications (iOS and Android), wireless security, APIs, cloud environments, and Linux OS
• Evaluate cloud infrastructure security across AWS, Azure, or GCP environments, including IAM policies, network segmentation, storage configurations, and serverless architectures
• Assess container and orchestration security (Docker, Kubernetes) for vehicle-connected cloud services and microservices deployments
• Review cloud-native application security controls such as API gateways, service meshes, secrets management, and logging/monitoring configurations
• Communicate complex technical findings and recommend the appropriate course of action, supporting the mitigation and re-validation efforts
• Support testing Connected Services ecosystems to identify and report security vulnerabilities and ensure compliance with security standards
• Develop and maintain security testing tools to support penetration testing and security verification activities, ensuring thorough identification of vulnerabilities
• Develop skills through continuous learning and apply what you have learned relevant to emerging attack vectors, vulnerabilities, and exploits across application and cloud domains
• Travel to clients or partners sites as needed to provide on-site support for security testing and verification activities

Application Security Engineer

Security Engineer

• Perform penetration testing across Bluetooth (Classic/BLE), Wi-Fi, NFC, UWB, Cellular (LTE/5G), GNSS, and other RF-based vehicle subsystems
• Setting up a test environment to conduct analysis of the communication between the UE and eNodeB
• Performing security assessments on wireless devices to identify potential vulnerabilities
• Identifying various methods to circumvent security controls such as authentication mechanism on various wireless devices such as Bluetooth/Wi-Fi, NFC, etc.
• Capturing wireless communications between a smart phone, and Device Under Test (DUT), and identify ways to impersonate the device
• Attempting to extract and/or capture secret keys exchanged during the authentication between the two wireless devices
• Identifying where secret keys are stored persistently upon a successful authentication between two devices
• Identifying the type of authentication and security mode BLE peripheral/central and WPA supports
• Performing analysis on the secure link during the BLE pairing process and identify potential misconfigurations or security flaws
• Identifying and exploiting the vulnerabilities in NFC systems
• Capturing, decoding and/or performing replay/relay attacks
• Generating test reports, and recommending the appropriate course of action, and supporting the mitigation and re-validation efforts
• Participating in research activities to investigate vulnerabilities, emerging cyber threats, and new technologies

Product Security Engineer, Wireless Security

Project Manager

• Lead end‑to‑end infrastructure projects, including scope definition, schedule development, cost estimation, and risk management.
• Develop, maintain, and track detailed project plans, milestones, and dependencies across infrastructure workstreams.
• Ensure projects are delivered on time, within scope, and within budget.
• Identify, assess, and mitigate project risks and issues, escalating as necessary.
• Coordinate activities across internal IT teams, external vendors, and system integrators.
• Serve as the primary point of contact for infrastructure project stakeholders.
• Facilitate regular project status meetings and provide clear, timely updates on progress, risks, and dependencies.
• Collaborate with cross‑functional teams to align project objectives and expectations.
• Ensure stakeholder requirements are clearly understood and reflected in project plans.

Senior Principal Engineer

Application Security Engineer

Product Security Engineer, Wireless Security

Infrastructure Project Manager