Back to jobs
New

Senior Cybersecurity & OTA Engineer

Loveland, CO

As the leading transit bus manufacturer in the United States, GILLIG buses play a critical role in the environmental and social initiatives in communities across our nation.  GILLIG is on the forefront in the transition to zero-emission vehicles and has an unmatched reputation in the industry for quality, reliability, durability, service, and support.  From initial design through final assembly, each GILLIG bus is designed and built in Livermore, CA. 

WHY GILLIG

  • Leader in environmentally friendly mobility solutions including battery electric, hybrid electric, near-zero CNG and clean diesel transit buses
  • Renowned for its inclusive team/family-oriented culture
  • Stable, successful, and growing organization – a Bay Area business for over 132 years!
  • Flexible schedules (*depending on project needs)
  • Excellent compensation including company paid medical premiums, generous retirement plan and other comprehensive benefits

DEPARTMENT OVERVIEW

GILLIG Engineering is responsible for the development, customization, and configuration of GILLIG’s clean technology heavy-duty transit buses.  We are committed to developing the most reliable buses that connect communities, eliminate congestion, and contribute to a greener environment.  Our engineers are engaged in designing, analyzing, testing, launching, and problem-solving across a wide range of technical areas. 

Electrical & Electronic (E/E) Systems Engineering is responsible for designing, developing, and optimizing E/E systems and components including low & high voltage power distribution, CAN bus network topology & variation, powertrain/body component electrical system architecture and integration to ensure proper functionality, safety, durability, and performance. They collaborate with cross-functional teams to meet regulatory standards, trouble-shoot issues, and ensure cost-effective and efficient designs tailored to the needs of heavy-duty transit buses. 

ABOUT THE ROLE

We are looking for a Senior Engineer in the CTC team who will be responsible for the overall design, development, and integration of our on-vehicle cybersecurity and over-the-air (OTA) update systems for all future vehicles. You will have direct influence on vehicle electrical systems from concept through to manufacturing launch to field support.

You will be part of the team that develops the industry’s best-in-class zero emission bus. You will focus on item definitions, cybersecurity concepts, threat assessments, cybersecurity goals, component selection, component compliance, cybersecurity lifecycle management and OTA infrastructure. Assignments are broad in scope and highly complex that require outstanding creativity, superior initiative, good judgement, and leadership skills combined with the willingness to do hands-on engineering.

This is a hands-on, on-site role at our Loveland, CO facility (Colorado Technology Center) and reports to the E/E Systems Engineering Manager. The Colorado Technology Center (CTC) was created in early 2024 and is focused on developing the next generation ZEV powertrains and Advanced Engineering projects for the broader GILLIG enterprise.

TECHNICAL FOCUS

Vehicle Cybersecurity & Over-the-Air Updates

You will apply your skills & experience to provide highly customized, vehicle-based cybersecurity and over-the-air update systems through definition of on-vehicle assets (items), threats, cybersecurity goals, cybersecurity implementations and component selection. Additional consideration for legacy devices and advanced connectivity devices will also play a major factor as the GILLIG Transit Bus is both a heavy-duty industrial and automotive product. Experience with cybersecurity standards (ISO 21434) and functional safety (ISO 26262) is preferred. Experience in on-vehicle networking, OTA updates and penetration testing is a plus. 

IN THIS ROLE YOU WILL

  • Conduct Threat Analysis and Risk Assessment (TARA) for vehicle E/E systems
  • Define cybersecurity goals, requirements, and specifications for on-vehicle assets
  • Develop and maintain the vehicle cybersecurity management system (CSMS) and ensure lifecycle compliance
  • Design and implement OTA update architecture including secure boot, code signing, version management, rollback mechanisms and update orchestration
  • Oversee cybersecurity validation and verification activities including penetration testing and vulnerability assessments
  • Collaborate with E/E and software teams to integrate cybersecurity controls into the vehicle network architecture (CAN, Ethernet)
  • Support functional safety analysis and ensure cybersecurity measures do not compromise safety
  • Collaborate with suppliers to ensure third-party components and subsystems meet cybersecurity requirements and compliance
  • Mentor and provide technical direction for junior engineers on cybersecurity and OTA best practices
  • Guide company direction for on-vehicle cybersecurity goals
  • Analyze and provide feedback to customer and industry requirements and standards

SCOPE OF THE ROLE

  • Autonomy: Ability to work independently with review at critical points.
  • Technically Minded: Apply industry practices and standards and provide input and advice to other staff members on cybersecurity practices. Exhibit advanced wide-ranging experience, using in-depth professional knowledge, acumen, concepts and company objectives to develop and resolve complex cybersecurity challenges.
  • Time Management: Work productively with cross-functional teams to deliver projects on schedule and on budget.
  • Communication: Collaborate and teach up, down and across the organization to help raise the skills and knowledge of the GILLIG team. Adapt style to differing audiences and adept at persuasion on complex subjects.
  • Complexity: Assignments are broad in scope and highly complex that require outstanding creativity, superior initiative, good judgement, and leadership skills. Work on problems with diverse scope, where analysis of information requires evaluation of identifiable factors. Devise solutions based on limited information and precedent and adapt existing approaches to resolve issues. Use evaluation, judgment, and interpretation to select the right course of action.
  • Quality & Standards: Cybersecurity documentation, threat models, and risk assessments are accurate and complete. Released designs meet all cybersecurity objectives, compliance requirements, & customer specifications.

BASIC QUALIFICATIONS

  • Bachelor of Science (BS) in Engineering, Computer Science, or Cybersecurity.
  • Minimum 5 years of experience in cybersecurity engineering, preferably in automotive, commercial, or heavy-duty vehicle systems.
  • Direct experience with:
    • Threat analysis and risk assessment (TARA), cybersecurity concept development, and cybersecurity lifecycle management
    • Vehicle network security for CAN bus and J1939 protocols
    • OTA update systems design, deployment, and validation including secure boot, firmware signing, and delta update strategies
  • Familiarity with:
    • Functional safety standards (ISO 26262) and their interaction with cybersecurity requirements.
    • Heavy-duty vehicle E/E architectures and connected vehicle ecosystems.
    • Penetration testing tools and methodologies (e.g., Wireshark, CANoe, bus analyzers) for vehicle network security assessment.
    • Standard problem-solving methodologies and tools such as: 8-D, Five Whys, & Fishbone diagrams, as well as cybersecurity incident response frameworks.
    • SAE vehicle communication standards such as J1939, J1939-76 (security), and automotive Ethernet protocols.
    • Industry and regulatory standards such as UN R155, UN R156, NIST Cybersecurity Framework, APTA, etc.

WORK ENVIRONMENT:

  • Ability to lift 25 lbs.
  • Prolonged periods of sitting/standing at a desk and working on a computer
  • Regularly required to sit, stand, and walk and occasionally kneel or squat
  • The ideal candidate must be able to complete all physical requirements of the job with or without a reasonable accommodation.
  • Must be able to navigate manufacturing environment, comfortable around heavy machinery, tools, etc.
  • Must be able to wear Personal Protective Equipment, (i.e. safety glasses, bump caps, hearing protection, etc.)
  • 5% travel may be required
  • Typical start time 8:00AM MT

EXPECTED COMPENSATION

$75,000 - $180,000/annual salary + premium benefits

Pay offered may vary depending on multiple individualized factors, including market location, job classification, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if a candidate receives an offer of employment.

 

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

GILLIG is committed to providing equal opportunities to all employees and applicants for employment. We are committed to creating an inclusive and diverse workplace that values and respects the unique talents, experiences, and perspectives of our employees and the people we serve. As an equal opportunity employer, we do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, pregnancy, gender identity or any other characteristic protected by law.

 

 

 

 

 

GILLIG is an equal employment opportunity and affirmative action employer.

Create a Job Alert

Interested in building your career at GILLIG ? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...

A Close Personal Relationship is defined by the following:  spouse, children, sibling, parent, romantic/intimate, live-in/roommate/housemate, or any other family relationship.  

Select...
Select...
Select...
Select...

I certify that I have personally completed this application and answered all questions truthfully, and have not knowingly withheld, misrepresented or omitted any information relative to this application, my resume or other attached materials. I understand to do so would result in my being eliminated from further consideration.

I further understand that, if accepted for employment, any misrepresentation or material omission may result in immediate termination of my employment, regardless of the time elapsed.

I also understand that GILLIG LLC may hire only lawfully authorized workers and that, if selected, my employment is contingent upon my ability to provide acceptable proof of my identity and employment eligibility prior to beginning employment.

I hereby authorize GILLIG LLC and/or its authorized agents to thoroughly investigate my background, including criminal convictions or history, motor vehicle reports, all my references, complete work record, education, and all other matters related to my suitability for employment, and further I authorize my former employers to disclose to the company any letters, reports, performance appraisals, etc. related to my work records without giving me prior notice of such disclosure.

In addition, I further release the company, former employers, and all other persons, corporations, partnerships, and associations from any and all claims, demands or liabilities arising out of or in any way related to such investigation or disclosure.

I understand that nothing contained in the application or conveyed during any interview which may be granted is intended to create an employment contract between me and the company.

In addition, I understand and agree that if l am employed, my employment is for no definite or determinable period and may be terminated at any time, with or without notice, at the option of myself or the company, and that no promises or representations contrary to the foregoing are binding on the company unless made in writing and signed by me and an officer of the company’s designated representative. If employed, I agree to read and comply with all company rules, regulations and policies, and return all company property and records upon my termination.

If you agree with the above statements, please select yes now.

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in GILLIG ’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.