Cybersecurity Specialist

O projekcie:
Team description:

We lead the end-to-end development, deployment, and continuous enhancement of Toyota’s connected services ecosystem across European markets. Our work oversees the integration of vehicle connectivity platforms, mobile applications, and cloud-based services, ensuring scalability, security, and a seamless user experience. We collaborate with engineering, product, IT, legal, and external partners to accelerate service rollout and maintain operational excellence.

 

Role Summary:

We would like to invite you to join the adventure of expanding the TME PL branch in the Toyota Digital Hub in Wrocław. You will work as part of a team responsible for ensuring the integration of cybersecurity principles into the software development lifecycle (SDLC) for connected services and compliance with R155 regulation, where applicable. The ideal candidate needs to have a solid technical background and experience in threat analysis, vulnerability management, risk assessment, and network security protocols.

Formal Role Details:
- Job Type: Employment contract, first agreement for 6 months- Starting date: Position available since September 2026- Location: Wrocław, Silver Tower Office Center- Working Pattern: Hybrid — 2 days every 2 weeks (flexible), in line with business needs- Reporting line: Manager / Team Lead- Education level required: Bachelor’s/Master’s degree

Wymagania:
Qualifications & Skills:

What we require:
- Up to 5 years of experience in cybersecurity roles, with practical experience ensuring application security for out-of-car systems (SDLC, CSMS, and vulnerability management). - Hands-on experience with Threat Analysis and Risk Assessment (TARA), security testing (SAST/DAST/pen-tests), code reviews, and secure design practices. - Experience in vulnerability management, incident response, and cybersecurity governance processes. - Experience in preparing type approval evidence and supporting audits. - Stakeholder management and communication skills to engage with software development teams, leadership, and auditors. - Basic understanding of microservices architecture and AWS - Understanding of encryption, authentication protocols (OAuth 2.0, JWT), and API security - Familiarity with CI/CD pipelines - Problem-solving and communication skills.

ADDITIONAL REQUIREMENTS (considered an advantage):
- Bachelor’s/Master’s in Cybersecurity, Computer Science, Automotive Engineering, or related field. - Practical hands-on experience in software development.



You have TOYOTA DNA, this means:
- Courage: you are ready to let go of the easy path to reach challenging targets. - Creativity: your passion drives you to explore innovative ideas and challenge the impossible. - Coaching: you share knowledge and feedback with your colleagues and celebrate each other's success. - Curiosity: you are open to new experiences and able to combine imagination with fact-based observation. - Collaboration: you are a team player, respectful and inclusive in your style, and you take a customer-oriented approach.

Codzienne zadania:
- Work with Development teams to ensure Cybersecurity practices are being followed including secure design, code review, threat modelling (TARA), and security testing (static/dynamic/penetration).
- Support development teams in Threat Analysis and Risk Assessment (TARA) for out of car systems, map identified risks to controls and ensure traceability.
- Develop, document, and enforce cybersecurity policies, procedures, and templates supporting SDLC processes and R155 governance.
- Ensure cybersecurity gates and activities (secure requirements, architecture reviews, TARA, SAST/DAST, and penetration testing) are respected by development teams.
- Align with internal stakeholders to review and approve documentation for type approval and secure development audits.
- Identify improvement points in the current process and propose potential options for improvement.