Senior Product Manager (Cyber Security)

About the Team & Mission

42dot is a software-centric company driving the Software-Defined Vehicle (SDV) transition. We are seeking a Cyber Security PM who can design and own the security foundation across domains such as autonomous driving, IVI, SDV OS, Middleware, and BSW so that software in car controllers can operate securely on a single platform.

The Cyber Security PM is not just about collecting security requirements and artifacts. Based on threat analysis across vehicle, cloud, and OTA, the role defines security goals and architecture, and internalizes security throughout the development lifecycle to ensure consistency across multiple domains, development teams, and partners. This is an end-to-end leadership role from concept-stage threat identification through security requirements allocation, implementation review, security verification (vulnerability assessment and penetration testing), release approval, and post-production vulnerability monitoring and response. The responsibility is to design and own the evidence that the product is safe, not just to develop individual security features.

To do this, the role translates regulatory requirements of ISO/SAE 21434 and UNECE R155/R156 into actual development processes, and analyzes the impact of changes to platform security elements such as Secure Boot, key management, access control, communications security, and OTA to ensure compliance and product competitiveness.

Responsibilities

• Manage security development plans and execution

• Establish and manage the development roadmap, scope, schedules, and reliance on internal teams and external partners for vehicle Cyber Security products

• Develop and implement plans for security features across vehicle variants, including ECUs, vehicle networks, vehicle OS, Secure Boot, key/cert management, and diagnostic security

• Manage schedules and deliverables based on WBS and ASPICE, and create/manage essential documents such as Product

Requirements

• Document (PRD) and engineering requirements documents

• Requirements and Integration Coordination

• Analyze customer Cyber Security requirements and create and manage vehicle application plans by feature

• Ensure security requirements are reflected in the overall software architecture and communication specifications, designate security-specified software versions, and coordinate development priorities, security verification, and deployment timing with relevant teams

• Coordinate and drive decisions across multiple organizations including Vehicle PM, software development teams, software deployment, PMO, business, and verification

• Verification and Risk Management

• Plan and track security testing across development, integration, and on-vehicle validation stages, identify technical risks, and respond accordingly

• Manage SoC, ECU, Cyber Security features, infrastructure, and software vendor deliverables, schedules, and quality issues, and align decisions with internal development teams

Qualifications

• 5+ years of experience in PM/PMO/Product Management or related roles

• Experience managing schedules for multiple development teams and external partners in automotive, embedded software, ECU, vehicle platform or connected car domains, including HW/FW/SW integration or acting as a technical lead

• Experience leading security-related projects within overall SW development schedules, coordinating security versions, development priorities, and deployment timelines with relevant teams to drive decisions

• Basic understanding of OS, embedded software architecture, networks, or vehicle communications (CAN, Ethernet, etc.)

• Ability to understand SDV and SW architecture to assess how security requirements affect other features

• Ability to structure technical discussions into development timelines and decision items, document them, and facilitate consensus among multiple stakeholders

• Preferred Qualifications

• Experience applying automotive security standards and regulations (ISO/SAE 21434, UN R155) in real projects

• Experience with ASPICE assessments or CSMS certification responses

• Experience defining owners and mediating schedules and technical issues among multiple stakeholders

• Interview Process

• Document screening

• First interview (video, about 1 hour)

• Second interview (in-person or video, about 3 hours)

• Compensation discussion and joining

• Additional Information

• The process may change due to schedule and progress, and results will be notified individually by email

• When submitting applications, please exclude information prohibited by recruitment laws such as resident registration numbers, family relationships, marital status, salary, photos, physical attributes, or place of origin

• If you encounter submission errors or have questions, contact

• Veterans and employment-protected groups are given preference according to relevant laws

• People with disabilities who hold disability registration are given preference under applicable laws

• 42dot does not accept resumes from third-party recruiters unless invited and does not pay fees for unsolicited resumes

• If any information in the application is found to be false, employment may be canceled

• After the interview process, the candidate's consent may be used for a background check

• A 3-month probation period may apply

• A message to Future Teammates

• You will have the opportunity to define the product direction from the ground up and lead the entire product lifecycle to solve user problems. You will collaborate weekly with developers and designers to validate hypotheses and witness how the service you built changes the market in real time. We are looking for enthusiastic people who can navigate ambiguity, drive team synergy, and communicate effectively to reach consensus.