Senior Cybersecurity & OTA Engineer

As the leading transit bus manufacturer in the United States, GILLIG buses play a critical role in the environmental and social initiatives in communities across our nation.  GILLIG is on the forefront in the transition to zero-emission vehicles and has an unmatched reputation in the industry for quality, reliability, durability, service, and support.  From initial design through final assembly, each GILLIG bus is designed and built in Livermore, CA.  WHY GILLIG Leader in environmentally friendly mobility solutions including battery electric, hybrid electric, near-zero CNG and clean diesel transit buses Renowned for its inclusive team/family-oriented culture Stable, successful, and growing organization – a Bay Area business for over 132 years! Flexible schedules (*depending on project needs) Excellent compensation including company paid medical premiums, generous retirement plan and other comprehensive benefits DEPARTMENT OVERVIEW GILLIG Engineering is responsible for the development, customization, and configuration of GILLIG’s clean technology heavy-duty transit buses.  We are committed to developing the most reliable buses that connect communities, eliminate congestion, and contribute to a greener environment.  Our engineers are engaged in designing, analyzing, testing, launching, and problem-solving across a wide range of technical areas.  Electrical & Electronic (E/E) Systems Engineering is responsible for designing, developing, and optimizing E/E systems and components including low & high voltage power distribution, CAN bus network topology & variation, powertrain/body component electrical system architecture and integration to ensure proper functionality, safety, durability, and performance. They collaborate with cross-functional teams to meet regulatory standards, trouble-shoot issues, and ensure cost-effective and efficient designs tailored to the needs of heavy-duty transit buses.  ABOUT THE ROLE We are looking for a Senior Engineer in the CTC team who will be responsible for the overall design, development, and integration of our on-vehicle cybersecurity and over-the-air (OTA) update systems for all future vehicles. You will have direct influence on vehicle electrical systems from concept through to manufacturing launch to field support. You will be part of the team that develops the industry’s best-in-class zero emission bus. You will focus on item definitions, cybersecurity concepts, threat assessments, cybersecurity goals, component selection, component compliance, cybersecurity lifecycle management and OTA infrastructure. Assignments are broad in scope and highly complex that require outstanding creativity, superior initiative, good judgement, and leadership skills combined with the willingness to do hands-on engineering. This is a hands-on, on-site role at our Loveland, CO facility (Colorado Technology Center) or our Livermore, CA Headquarters and reports to the E/E Systems Engineering Manager. The Colorado Technology Center (CTC) was created in early 2024 and is focused on developing the next generation ZEV powertrains and Advanced Engineering projects for the broader GILLIG enterprise. TECHNICAL FOCUS Vehicle Cybersecurity & Over-the-Air Updates You will apply your skills & experience to provide highly customized, vehicle-based cybersecurity and over-the-air update systems through definition of on-vehicle assets (items), threats, cybersecurity goals, cybersecurity implementations and component selection. Additional consideration for legacy devices and advanced connectivity devices will also play a major factor as the GILLIG Transit Bus is both a heavy-duty industrial and automotive product. Experience with cybersecurity standards (ISO 21434) and functional safety (ISO 26262) is preferred. Experience in on-vehicle networking, OTA updates and penetration testing is a plus.  IN THIS ROLE YOU WILL Conduct Threat Analysis and Risk Assessment (TARA) for vehicle E/E systems Define cybersecurity goals, requirements, and specifications for on-vehicle assets Develop and maintain the vehicle cybersecurity management system (CSMS) and ensure lifecycle compliance Design and implement OTA update architecture including secure boot, code signing, version management, rollback mechanisms and update orchestration Oversee cybersecurity validation and verification activities including penetration testing and vulnerability assessments Collaborate with E/E and software teams to integrate cybersecurity controls into the vehicle network architecture (CAN, Ethernet) Support functional safety analysis and ensure cybersecurity measures do not compromise safety Collaborate with suppliers to ensure third-party components and subsystems meet cybersecurity requirements and compliance Mentor and provide technical direction for junior engineers on cybersecurity and OTA best practices Guide company direction for on-vehicle cybersecurity goals Analyze and provide feedback to customer and industry requirements and standards SCOPE OF THE ROLE Autonomy: Ability to work independently with review at critical points. Technically Minded: Apply industry practices and standards and provide input and advice to other staff members on cybersecurity practices. Exhibit advanced wide-ranging experience, using in-depth professional knowledge, acumen, concepts and company objectives to develop and resolve complex cybersecurity challenges. Time Management:  Work productively with cross-functional teams to deliver projects on schedule and on budget. Communication:  Collaborate and teach up, down and across the organization to help raise the skills and knowledge of the GILLIG team. Adapt style to differing audiences and adept at persuasion on complex subjects. Complexity:  Assignments are broad in scope and highly complex that require outstanding creativity, superior initiative, good judgement, and leadership skills. Work on problems with diverse sco