Cybersecurity Specialist

Toyota Digital HUB & SSC leads the end-to-end development, deployment, and continuous enhancement of Toyota’s connected services ecosystem across European markets. The team oversees integration of vehicle connectivity platforms, mobile applications, and cloud-based services, ensuring scalability, security, and a seamless user experience. They collaborate with engineering, product, IT, legal, and external partners to accelerate service rollout and maintain operational excellence.

• Up to 5 years of experience in cybersecurity roles with practical experience ensuring application security for out-of-car systems (SDLC, CSMS, and vulnerability management).
• Hands-on experience with Threat Analysis and Risk Assessment (TARA), security testing (SAST/DAST/penetration tests), code reviews, and secure design practices.
• Experience in vulnerability management, incident response, and cybersecurity governance processes.
• Experience in preparing type approval evidence and supporting audits.
• Stakeholder management and communication skills to engage with software development teams, leadership, and auditors.
• Basic understanding of microservices architecture and AWS.
• Understanding of encryption, authentication protocols (OAuth 2.0, JWT), and API security.
• Familiarity with CI/CD pipelines.
• Problem-solving and communication skills.

Nice to have:

• Bachelor’s/Master’s degree in Cybersecurity, Computer Science, Automotive Engineering, or related field.
• Practical hands-on experience in software development.
• Knowledge of Go / Golang.

• Work with development teams to ensure cybersecurity practices including secure design, code review, threat modelling (TARA), and security testing (static/dynamic/penetration).
• Support development teams in Threat Analysis and Risk Assessment (TARA) for out-of-car systems and map identified risks to controls ensuring traceability.
• Develop, document, and enforce cybersecurity policies, procedures, and templates supporting SDLC processes and R155 governance.
• Ensure cybersecurity gates and activities (secure requirements, architecture reviews, TARA, SAST/DAST, and penetration testing) are respected by development teams.
• Align with internal stakeholders to review and approve documentation for type approval and secure development audits.
• Identify improvement points in the current process and propose potential options for improvement.

Job Type: Employment contract, first agreement for 6 months. Starting date: Position available since September 2026. Location: Wrocław, Silver Tower Office Center. Working Pattern: Hybrid — 2 days every 2 weeks (flexible), in line with business needs. Reporting line: Manager / Team Lead. Education level required: Bachelor’s/Master’s degree.