Advanced Engineer - Application Security

A Career at HARMAN
As a technology leader that is rapidly on the move, HARMAN is filled with people who are focused on making life better. Innovation, inclusivity and teamwork are a part of our DNA. When you add that to the challenges we take on and solve together, you’ll discover that at HARMAN you can grow, make a difference and be proud of the work you do every day.
Introduction: A Career at HARMAN Automotive
We’re a global, multi-disciplinary team putting the innovative power of technology to work and transforming tomorrow. At HARMAN Automotive, we give you the keys to fast-track your career.
Engineer audio systems and integrated technology platforms that augment the driving experience
Combine ingenuity, in-depth research, and a spirit of collaboration with design and engineering excellence
Advance in-vehicle infotainment, safety, efficiency, and enjoyment
What You'll Be Part Of
We are seeking a Security Engineer to join our Global KMS team, contributing to the development and operation of foundational security services across our platform landscape.
In this role, you will help design, maintain, and extend security infrastructure and services that underpin secure device provisioning, lifecycle management, and SOC-integrated Root of Trust (RoT) capabilities. Your work will directly support Trusted Execution Environments (TEEs) and other trusted platform components, ensuring robust, scalable, and secure manufacturing and deployment processes. This position requires close collaboration across engineering, manufacturing, and partner ecosystems, combining strong technical expertise with a structured and operational mindset.
How You'll Make an Impact
Collaborate closely with product engineering, IT, and manufacturing teams to ensure security is embedded proactively throughout the product development lifecycle.
Design, develop, deploy, and operate security infrastructure services, including:
Key Management Systems (KMS)
Manufacturing provisioning services
Certificate Authorities (CA)
Code-signing infrastructure
Define and implement APIs, protocols, and services for the secure enumeration, configuration, and management of platform assets.
Develop and maintain policies, procedures, and controls for cryptographic key generation, handling, lifecycle management, and access governance.
Interface with manufacturing partners to support, troubleshoot, and resolve security provisioning issues.
Partner with software development teams to enable hosting platforms, tooling, SDKs, and integration components for internal and external consumers.
Own the day-to-day operation, reliability, and continuous improvement of security infrastructure services.
What Makes You a Strong Fit
5+ years of industry experience in a security engineering role.
Strong working knowledge of Linux environments, including command-line tools.
Proficiency in C/C++, Java, and Python.
Practical experience with HTTP(S) services, including reverse proxies (Apache or Nginx), VPNs, and SSL/TLS configuration.
Foundational experience with Hardware Security Modules (HSMs), including:
PKCS#11 (Cryptoki) interface usage
Code-signing services
Secure payload decryption, certificate signing, and device identity generation
Ability to understand complex systems, particularly within vehicle architectures and manufacturing workflows.
Strong understanding of security concepts, including:
Secure key generation and delivery
Access control mechanisms and token-based authorization
Multi-party authorization (e.g., n-of-m approval schemes)
Cryptographic primitives and secure communication protocols
Bonus Points If You Have
Bachelor's or Master's degree in Computer Science, Engineering, Mathematics, or a related field.
Excellent verbal and written communication skills in English.
Strong collaboration skills, openness in communication, resilience, and a high sense of ownership.
Automotive cybersecurity experience, ideally within a Tier-1 supplier or OEM environment.
Hands-on experience with:
HSM deployment, maintenance, backup, and recovery
Code-signing infrastructure and access control systems
Web services deployment and CI/CD pipelines
Experience with containerized and cloud-native technologies such as Docker, Kubernetes, and Amazon ECS.
Familiarity with CloudHSM technologies.
Experience with Utimaco HSMs, including firmware configuration and management.
Experience with logging, monitoring, and observability tools such as rsyslog, Logstash, and the ELK Stack.
Knowledge of Linux system hardening and access control technologies, including SELinux, AppArmor, SMACK, PAM, SSH, and FIDO/U2F.
Key provisioning experience for Trusted Execution Environments (TEEs), such as Trustonic/Kinibi.
Practical experience with:
Microsoft SignTool
AUTOSAR (SHE)
Android APK/APEX signing processes
Things To Know
Willing to travel up to 5%, both domestically and internationally.
Willing to work in an office- hybrid setup in Bangalore, India.
What You Can Expect
A hybrid work environment that balances flexibility with in-person collaboration, with most office-based roles onsite three days a week.
Access to employee discounts on HARMAN and Samsung products (including JBL, Harman / Kardon, AKG, and others)
Learning and development opportunities through our award-winning HARMAN University programs
Wellness benefits designed to support your overall well-being
Tuition reimbursement support
Access to the HARMAN campus fitness center and cafeteria, where available
An inclusive and diverse work environment that supports both your professional and personal development
#LI-AD3
HARMAN is proud to be an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.