Worked on Bosch ECU cybersecurity programs, covering automotive product security across the full development lifecycle in alignment with ISO/SAE 21434 and UN R155/R156. Key responsibilities: • Conducted Threat and Risk Analysis (TARA) using attack trees and Risk Rating Analysis (RRA) to identify cybersecurity threats, assess impact and feasibility, and establish risk treatment decisions for UN R155 compliance. • Defined and validated safety-critical security controls for Bosch Airbag Control Units (ACU) — including Secure Boot via digital signatures, SecOC/CAN-Sec message authentication for in-vehicle network integrity, and UDS Challenge-Response access restrictions for diagnostic interfaces. • Validated cryptographic protocol implementations (AES-128/256, RSA, Diffie-Hellman) for secure encryption, session establishment, and key exchange; authored KMS/HSM requirements for Type Approval documentation. • Reviewed penetration test reports, applied CVSS-based scoring to prioritise vulnerabilities, and tracked remediation to verified closure with cross-functional engineering teams. • Authored cybersecurity requirements and security concept documentation with full traceability from threat identification through to implemented controls and verification evidence. • Maintained risk registers, CSMS artefacts, and compliance evidence packages aligned with UN R155/R156; supported internal audit activities and OEM compliance queries. • Performed Security Impact Analysis for ECU change requests, assessing new attack surface exposure and coordinating updated risk treatment where required. Skills: TARA · ISO/SAE 21434 · UN R155 · UN R156 · Secure Boot · SecOC · CAN Security · UDS · AUTOSAR · CVSS · Penetration Test Review · Risk Register Management · KMS · HSM · AES · RSA · Cryptography · GRC · Vulnerability Assessments.