Product Cybersecurity Engineer

About TTS-US:

Founded in 2011, Toyota Tsusho Systems US, Inc. (TTS-US) is a Toyota group company, that develops IT solutions wherever global businesses operate. Transforming into a technology and mobility company, TTS-US with it's 8 TTS affiliates worldwide is establishing a secure and resilient Toyota global value chain. The creative capacity to forge such limitless business opportunities is one of the strengths of Toyota Tsusho Systems.

The Product Cybersecurity Engineer supports the Product Cybersecurity Integrity team in confirming that Toyota Motor North America out-vehicle products and services meet CSMS expectations. The engineer performs defined technical reviews, coordinates work across multiple stakeholders, and improves how the team plans, tracks, and reports compliance activities. This early-career role combines technical curiosity and critical thinking with disciplined project execution.

The engineer will learn to evaluate cloud, web, mobile, API, and connected service architectures; use AI and automation responsibly to improve efficiency and consistency; and communicate clear findings for senior review. Final compliance decisions and material interpretation issues remain with experienced PCI personnel while the engineer develops independent assessment capability.

Essential Functions:

Out-Vehicle Technical Assessment o Support CSMS gate assessments for out-vehicle products and services.

o Review system architecture, data flow, interface, and change information to identify security-relevant components, dependencies, and missing information.

o Draft assessment observations, questions, and findings for senior review, and track responses and corrective actions to closure.

o Coordinate with CSMS auditors so technical assessments supplement compliance audits without duplicating audit activities.

o Apply ISO/SAE 21434 and UN R155 concepts to out-vehicle assessment work while building deeper subject matter expertise through structured mentoring.

Project Planning and Management o Build and maintain project plans that define scope, activities, owners, milestones, dependencies, deliverables, and completion dates.

o Coordinate assessment schedules with product teams, auditors, and other stakeholders.

o Track progress, decisions, risks, issues, and actions; escalate concerns early with clear impact and recommended next steps.

o Prepare concise status updates and maintain accurate records that support program-level reporting.

o Manage multiple assignments with attention to priorities, deadlines, and follow-through.

Compliance Data Automation and AI o Use approved AI tools to accelerate research, document analysis, evidence triage, drafting, and recurring compliance work while validating outputs before use.

o Identify repeatable tasks that can be simplified or automated and develop practical solutions using Python, SQL, APIs, Power BI, Power Query, Power Automate, or comparable tools.

o Develop automated data quality checks and reporting that identify missing, inconsistent, or overdue information.

o Handle confidential and proprietary information in accordance with applicable data protection and AI use requirements.

Governance and Standards Support o Maintain assigned portions of standards, policy, procedure, control, and evidence mappings.

o Support updates to assessment procedures, templates, guidance, and training materials based on lessons learned.

o Research relevant cybersecurity practices and emerging issues and summarize their potential impact for senior review.

Role Scope o Approximately 50%: Out-vehicle technical assurance, including architecture and evidence review, gate assessments, findings, and follow-up.

o Approximately 30%: Compliance data automation and AI, including traceability, reporting, quality checks, workflow automation, and responsible AI use.

o Approximately 15%: Project planning and execution, including plans, schedules, milestones, dependencies, risks, status, and stakeholder coordination.

o Approximately 5%: Governance and standards support, including control mappings, procedure maintenance, research, and lessons learned.

First Year Success Measures o With mentoring and defined review points, independently triage evidence and complete readiness checks for a defined out-vehicle assessment scope.

o Analyze out-vehicle architecture and data flow information and identify relevant interfaces, change points, assumptions, and missing evidence.

o Create and manage assessment project plans with reliable milestone, risk, action, and status tracking.

o Draft technically sound observations and findings that require limited revision before senior approval.

o Automate at least one recurring compliance, reporting, or data quality activity and document the process for reuse.

o Use AI tools consistently and responsibly while demonstrating verification, confidentiality, and sound engineering judgment.

o Contribute to an integrated traceability model connecting out-vehicle products and systems with requirements, evidence, assessments, audits, findings, and owners.

Competencies:

· Foundational understanding of cybersecurity principles, secure development practices, risk assessment, and evidence-based compliance.

· Ability to read and discuss system architecture, network, data flow, and interface diagrams for cloud, web, mobile, API, or connected service environments.

· Strong project planning and management skills, including organizing work, building schedules, tracking dependencies, and communicating status and risks.

· Clear written and verbal communication skills, sound judgment, attention to detail, and willingness to ask questions and escalate uncertainty.

· Ability to collaborate with technical and nontechnical stakeholders across multiple functions and time zones.

· Learning agility, technical reasoning, critical thinking, disciplined execution, and responsible use of AI and automation.

Requirements

• Bachelor's degree in cybersecurity, computer science, computer engineering, electrical engineering, systems engineering, or a related technical field, or equivalent practical experience.
• Foundational understanding of cybersecurity principles, secure development practices, risk assessment, and evidence-based compliance.
• Ability to read and discuss system architecture, network, data flow, and interface diagrams for cloud, web, mobile, API, or connected service environments.
• Strong project planning and management skills, including experience organizing work, building schedules, tracking dependencies, and communicating status and risks.
• Demonstrated adoption of AI or automation tools to improve the quality or efficiency of technical, analytical, or project work.
• Working knowledge of data analysis or automation using one or more tools such as Python, SQL, Power BI, Power Query, Power Automate, or APIs.
• Clear written and verbal communication skills, sound judgment, attention to detail, and willingness to ask questions and escalate uncertainty.
• Ability to collaborate with technical and nontechnical stakeholders across multiple functions and time zones.

Preferred Qualifications:

• Internship, co-op, capstone, laboratory, or early-career experience involving cybersecurity, systems engineering, cloud or application security, technical compliance, data analysis, or workflow automation.
• Familiarity with ISO/SAE 21434, UN R155, cybersecurity management systems, requirements traceability, audit evidence, findings, or corrective action processes.
• Exposure to cloud platforms, API security, identity and access management, web or mobile application security, connected services, or DevSecOps practices.
• Experience translating technical information into concise assessment notes, project updates, dashboards, or management reports.
• Experience working in a regulated, automotive, manufacturing, or global organization.