Job description You will join Amaris Consulting within our Automotive teams in Rocester. Responsibilities 1) Penetration testing and adversarial assessment Plan and execute penetration tests on the products with digital elements: ECUs, telematics units, in vehicle networks (CAN, J1939, LIN), diagnostic interfaces (UDS/OBD), bootloaders, connected services and mobile/cloud backends. Use threat intelligence and TARA outputs to prioritise attack paths and test scenarios. Conduct hardware level assessments: JTAG/UART access, debug interface analysis, firmware extraction and analysis, side channel awareness. Test software components, APIs, update mechanisms and cryptographic implementations as required. 2) Testing evidence and programme assurance Produce clear, technically detailed reports: vulnerability description, reproduction steps, severity rating, affected products/versions, and recommended remediation. Ensure test outputs meet the coverage and evidence expectations defined by the Senior Engineer - Cybersecurity Compliance for programme assurance. Align findings with ISO/SAE 21434 verification and validation requirements and relevant compliance evidence packs. 3) Collaboration with vulnerability management Feed confirmed findings directly into the vulnerability management process, with sufficient detail for triage, CVSS scoring and remediation tracking. Support the Vulnerability Management Engineer in assessing exploitability of CVEs or supplier reported issues where hands on validation is needed. Contribute to SBOM informed testing priorities as component level intelligence evolves. Capture lessons learned from test engagements and feed them into internal standards, TARA guidance and cybersecurity requirements. Stay current with automotive and embedded system attack research, tooling, CVE/CWE trends and threat actor techniques relevant to off highway machinery. Support uplift of engineering teams through knowledge sharing on common vulnerability patterns and secure design. Qualifications and experience Essential Hands on penetration testing experience in embedded systems, OT/ICS, automotive or connected products (3+ years) Practical experience with automotive protocols: CAN, J1939, LIN, UDS, OBD II Hardware assessment skills: JTAG, UART, logic analysis, firmware extraction Familiarity with ISO/SAE 21434 and its verification and validation requirements Ability to write clear, technically precise test reports that engineers and compliance stakeholders can both use Strong analytical approach: rigorous, evidence based, reproducible Desired Experience in Tier 1 or OEM sectors (on highway or off highway) Knowledge of IEC 62443 and CRA requirements, including Article 14 reporting context Familiarity with TARA and threat modelling outputs (attack trees, STRIDE, EVITA) Experience with tools such as CANalyzer, Wireshark, IDA Pro, Ghidra, Burp Suite, OpenOCD, GreatFET or equivalent Awareness of SBOM formats and their role in vulnerability identification Relevant certifications: OSCP, CEH, or automotive/embedded specific equivalents (e.g. TÜV Rheinland Cybersecurity) About you You're methodical. You document everything and your reports are good enough to hold up in a compliance audit. You're curious. You read CVE disclosures, follow automotive security research, and probably have test hardware at home. You can work across disciplines. Engineering, compliance, suppliers, sometimes legal. You adapt the message without losing the accuracy. You're pragmatic. You understand that findings need to land somewhere useful, and you care about closure as much as discovery. What We Offer An international community bringing together 110+ different nationalities. An environment where trust has a central place: 70% of our key leaders started their careers at the first level of responsibilities. A robust training system with our internal Academy and 250+ available modules. A vibrant workplace that frequently gathers for internal events, including afterworks and team buildings. The opportunity to contribute to high impact governance, assurance, and change initiatives for key clients. At Mantu, sustainability is part of everything we do. You'll have the opportunity to turn your ideas into action and make a tangible impact. Every day, our teams bring our ESG commitments to life, from reducing our footprint to driving positive change within our communities. Through our WeCare Together program, you'll be empowered to design and lead projects that create real social or environmental impact, with the company's full support. Who are we? Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1000 clients across the globe, we have been rolling out solutions in major projects for over a decade - this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We're focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your stepping stone to cross rivers of change, meet challenges and achieve all your projects with success. Amaris Consulting is proud to be an equal opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.
25/07/2026
Full time
Job description You will join Amaris Consulting within our Automotive teams in Rocester. Responsibilities 1) Penetration testing and adversarial assessment Plan and execute penetration tests on the products with digital elements: ECUs, telematics units, in vehicle networks (CAN, J1939, LIN), diagnostic interfaces (UDS/OBD), bootloaders, connected services and mobile/cloud backends. Use threat intelligence and TARA outputs to prioritise attack paths and test scenarios. Conduct hardware level assessments: JTAG/UART access, debug interface analysis, firmware extraction and analysis, side channel awareness. Test software components, APIs, update mechanisms and cryptographic implementations as required. 2) Testing evidence and programme assurance Produce clear, technically detailed reports: vulnerability description, reproduction steps, severity rating, affected products/versions, and recommended remediation. Ensure test outputs meet the coverage and evidence expectations defined by the Senior Engineer - Cybersecurity Compliance for programme assurance. Align findings with ISO/SAE 21434 verification and validation requirements and relevant compliance evidence packs. 3) Collaboration with vulnerability management Feed confirmed findings directly into the vulnerability management process, with sufficient detail for triage, CVSS scoring and remediation tracking. Support the Vulnerability Management Engineer in assessing exploitability of CVEs or supplier reported issues where hands on validation is needed. Contribute to SBOM informed testing priorities as component level intelligence evolves. Capture lessons learned from test engagements and feed them into internal standards, TARA guidance and cybersecurity requirements. Stay current with automotive and embedded system attack research, tooling, CVE/CWE trends and threat actor techniques relevant to off highway machinery. Support uplift of engineering teams through knowledge sharing on common vulnerability patterns and secure design. Qualifications and experience Essential Hands on penetration testing experience in embedded systems, OT/ICS, automotive or connected products (3+ years) Practical experience with automotive protocols: CAN, J1939, LIN, UDS, OBD II Hardware assessment skills: JTAG, UART, logic analysis, firmware extraction Familiarity with ISO/SAE 21434 and its verification and validation requirements Ability to write clear, technically precise test reports that engineers and compliance stakeholders can both use Strong analytical approach: rigorous, evidence based, reproducible Desired Experience in Tier 1 or OEM sectors (on highway or off highway) Knowledge of IEC 62443 and CRA requirements, including Article 14 reporting context Familiarity with TARA and threat modelling outputs (attack trees, STRIDE, EVITA) Experience with tools such as CANalyzer, Wireshark, IDA Pro, Ghidra, Burp Suite, OpenOCD, GreatFET or equivalent Awareness of SBOM formats and their role in vulnerability identification Relevant certifications: OSCP, CEH, or automotive/embedded specific equivalents (e.g. TÜV Rheinland Cybersecurity) About you You're methodical. You document everything and your reports are good enough to hold up in a compliance audit. You're curious. You read CVE disclosures, follow automotive security research, and probably have test hardware at home. You can work across disciplines. Engineering, compliance, suppliers, sometimes legal. You adapt the message without losing the accuracy. You're pragmatic. You understand that findings need to land somewhere useful, and you care about closure as much as discovery. What We Offer An international community bringing together 110+ different nationalities. An environment where trust has a central place: 70% of our key leaders started their careers at the first level of responsibilities. A robust training system with our internal Academy and 250+ available modules. A vibrant workplace that frequently gathers for internal events, including afterworks and team buildings. The opportunity to contribute to high impact governance, assurance, and change initiatives for key clients. At Mantu, sustainability is part of everything we do. You'll have the opportunity to turn your ideas into action and make a tangible impact. Every day, our teams bring our ESG commitments to life, from reducing our footprint to driving positive change within our communities. Through our WeCare Together program, you'll be empowered to design and lead projects that create real social or environmental impact, with the company's full support. Who are we? Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1000 clients across the globe, we have been rolling out solutions in major projects for over a decade - this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We're focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your stepping stone to cross rivers of change, meet challenges and achieve all your projects with success. Amaris Consulting is proud to be an equal opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.
Amaris Consulting, Rocester, UK, is seeking a cybersecurity tester specialized in embedded automotive systems. You will perform penetration testing on ECUs, CAN/J1939 networks, and OTA/update mechanisms, producing precise reports for engineering and compliance teams. Responsibilities include evidence driven testing, applying ISO/SAE 21434 standards, and contributing to vulnerability management triage while staying abreast of automotive threat research and best practices.
25/07/2026
Full time
Amaris Consulting, Rocester, UK, is seeking a cybersecurity tester specialized in embedded automotive systems. You will perform penetration testing on ECUs, CAN/J1939 networks, and OTA/update mechanisms, producing precise reports for engineering and compliance teams. Responsibilities include evidence driven testing, applying ISO/SAE 21434 standards, and contributing to vulnerability management triage while staying abreast of automotive threat research and best practices.
Cybersecurity Governance & Assurance Specialist London Permanent Job Amaris Consulting UK is looking for a talented and driven Cybersecurity Governance & Assurance Specialist to join our team and support one of our key clients in the off highway machinery sector. Your Missions Governance and Standards Own and maintain the product cybersecurity governance and assurance framework, aligned with the broader compliance model used across disciplines Develop and maintain internal standards, templates, checklists, and guidance to enable consistent execution across programmes (e.g., System of Interest definitions, TARA guidance, cybersecurity requirements, testing expectations, and evidence packs) Create and deliver training and enablement programmes to uplift engineering teams and drive "right first time" compliance Programme Compliance Assessment and Assurance Plan and execute cybersecurity compliance assessments of product programmes and suppliers, reporting status, risks, and evidence gaps clearly and early Assess alignment against internal requirements and relevant external standards and regulations, including ISO/SAE 21434, ISO 24882, IEC 62443, and the Cyber Resilience Act (CRA) Review the adequacy of key cybersecurity work products such as threat modelling/TARA outputs, requirements, architecture evidence, verification and validation strategies, and residual risk statements Drive closure of findings with stakeholders across systems, embedded software, verification, manufacturing/service, and suppliers Cybersecurity Testing Assurance Define cybersecurity testing expectations required for compliance evidence, covering coverage scope, methods, reporting, and remediation tracking Coordinate Red Team and testing activities to ensure outputs support programme assurance and close testing capability gaps Vulnerability Management and Post Production Assurance Establish and assure governance for post production vulnerability management, including monitoring from suppliers, research findings, Red Team outputs, and PSIRT channels, and routing to affected products Support readiness for CRA mandatory reporting, including Article 14 reporting workflows and fast track response for actively exploitable issues Capture and disseminate lessons learned (e.g., CWE/CVE insights) back into standards, checklists, and training materials Your Profile 3+ years of experience within Tier 1 or OEM sectors (on highway or off highway) in a cybersecurity role Demonstrable experience in product cybersecurity assurance, governance, compliance assessment, or cybersecurity audit for embedded or cyber physical products Strong working knowledge of ISO/SAE 21434 and ISO 24882, with the ability to translate them into practical internal processes and evidence expectations Working knowledge of IEC 62443 and supplier assurance requirements Familiarity with CRA compliance needs, including defined reporting workflows such as Article 14 Excellent technical writing, communication, and stakeholder management skills, with the ability to present risk clearly and pragmatically Knowledge or experience of TARA and threat modelling approaches, including review of threat artefacts such as attack trees, is a plus Background in vulnerability management and post production monitoring/triage governance is a plus Experience in cybersecurity requirements engineering and cybersecurity testing (including test evidence expectations) is a plus Awareness of functional safety interfaces and the security safety relationship is a plus Understanding of embedded product environments including ECUs, CAN, J1939, and diagnostics such as UDS is a plus Familiarity with SBOM concepts and their role in vulnerability monitoring and compliance evidence is a plus Self motivated, analytical, and pragmatic, with strong interpersonal skills and a collaborative mindset Resilient and adaptable, with a drive for continuous improvement and a high standard of technical delivery Amaris Consulting promotes equal opportunities. We are committed to bringing together people from diverse backgrounds and creating an inclusive work environment. In this regard, we welcome applications from all qualified individuals, regardless of sex, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.
06/07/2026
Full time
Cybersecurity Governance & Assurance Specialist London Permanent Job Amaris Consulting UK is looking for a talented and driven Cybersecurity Governance & Assurance Specialist to join our team and support one of our key clients in the off highway machinery sector. Your Missions Governance and Standards Own and maintain the product cybersecurity governance and assurance framework, aligned with the broader compliance model used across disciplines Develop and maintain internal standards, templates, checklists, and guidance to enable consistent execution across programmes (e.g., System of Interest definitions, TARA guidance, cybersecurity requirements, testing expectations, and evidence packs) Create and deliver training and enablement programmes to uplift engineering teams and drive "right first time" compliance Programme Compliance Assessment and Assurance Plan and execute cybersecurity compliance assessments of product programmes and suppliers, reporting status, risks, and evidence gaps clearly and early Assess alignment against internal requirements and relevant external standards and regulations, including ISO/SAE 21434, ISO 24882, IEC 62443, and the Cyber Resilience Act (CRA) Review the adequacy of key cybersecurity work products such as threat modelling/TARA outputs, requirements, architecture evidence, verification and validation strategies, and residual risk statements Drive closure of findings with stakeholders across systems, embedded software, verification, manufacturing/service, and suppliers Cybersecurity Testing Assurance Define cybersecurity testing expectations required for compliance evidence, covering coverage scope, methods, reporting, and remediation tracking Coordinate Red Team and testing activities to ensure outputs support programme assurance and close testing capability gaps Vulnerability Management and Post Production Assurance Establish and assure governance for post production vulnerability management, including monitoring from suppliers, research findings, Red Team outputs, and PSIRT channels, and routing to affected products Support readiness for CRA mandatory reporting, including Article 14 reporting workflows and fast track response for actively exploitable issues Capture and disseminate lessons learned (e.g., CWE/CVE insights) back into standards, checklists, and training materials Your Profile 3+ years of experience within Tier 1 or OEM sectors (on highway or off highway) in a cybersecurity role Demonstrable experience in product cybersecurity assurance, governance, compliance assessment, or cybersecurity audit for embedded or cyber physical products Strong working knowledge of ISO/SAE 21434 and ISO 24882, with the ability to translate them into practical internal processes and evidence expectations Working knowledge of IEC 62443 and supplier assurance requirements Familiarity with CRA compliance needs, including defined reporting workflows such as Article 14 Excellent technical writing, communication, and stakeholder management skills, with the ability to present risk clearly and pragmatically Knowledge or experience of TARA and threat modelling approaches, including review of threat artefacts such as attack trees, is a plus Background in vulnerability management and post production monitoring/triage governance is a plus Experience in cybersecurity requirements engineering and cybersecurity testing (including test evidence expectations) is a plus Awareness of functional safety interfaces and the security safety relationship is a plus Understanding of embedded product environments including ECUs, CAN, J1939, and diagnostics such as UDS is a plus Familiarity with SBOM concepts and their role in vulnerability monitoring and compliance evidence is a plus Self motivated, analytical, and pragmatic, with strong interpersonal skills and a collaborative mindset Resilient and adaptable, with a drive for continuous improvement and a high standard of technical delivery Amaris Consulting promotes equal opportunities. We are committed to bringing together people from diverse backgrounds and creating an inclusive work environment. In this regard, we welcome applications from all qualified individuals, regardless of sex, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.
AMARIS GROUP SA is seeking a talented Cybersecurity Governance & Assurance Specialist to join their team in London. This role focuses on supporting the cybersecurity governance framework and ensuring compliance within the off-highway machinery sector. Ideal candidates will possess over 3 years of cybersecurity experience, demonstrable skills in governance and compliance, and familiarity with key ISO standards. The position offers a dynamic and inclusive work environment.
06/07/2026
Full time
AMARIS GROUP SA is seeking a talented Cybersecurity Governance & Assurance Specialist to join their team in London. This role focuses on supporting the cybersecurity governance framework and ensuring compliance within the off-highway machinery sector. Ideal candidates will possess over 3 years of cybersecurity experience, demonstrable skills in governance and compliance, and familiarity with key ISO standards. The position offers a dynamic and inclusive work environment.
AMARIS GROUP SA is seeking a Business Analyst focused on Insurance in Greater London. In this role, you will serve as a key point of contact between business and technology, fostering innovation to deliver value through an agile and iterative approach. You will build strong relationships with stakeholders, document business requirements, and contribute to solution design in collaboration with technical teams. Ideal candidates have 5+ years of experience in a technology-focused role within management consulting, strong analytical abilities, and a Bachelor's or Master's degree in a relevant field. Join us to be part of a vibrant and diverse team!
05/07/2026
Full time
AMARIS GROUP SA is seeking a Business Analyst focused on Insurance in Greater London. In this role, you will serve as a key point of contact between business and technology, fostering innovation to deliver value through an agile and iterative approach. You will build strong relationships with stakeholders, document business requirements, and contribute to solution design in collaboration with technical teams. Ideal candidates have 5+ years of experience in a technology-focused role within management consulting, strong analytical abilities, and a Bachelor's or Master's degree in a relevant field. Join us to be part of a vibrant and diverse team!
Join our team and start a new adventure in a dynamic environment, where you will be able to fulfil your career expectations in a fast-growing organization. Being a consultant at Amaris Consulting means positioning yourself as a technical and functional expert, but above all, being an ambassador of our organization to clients, thanks to: Your interpersonal skills and ability to listen, in order to build a strong relationship of trust with our clients and fully understand their challenges and issues. Your curiosity and eagerness to learn, as we support over 1,000 clients from all sectors. Your Role As a Business Analyst focused on Insurance, you will be the conduit between business and technology for our clients. You will: Work closely with business product owners, solution architects, designers, developers, and quality engineers. Use an agile, iterative approach and design thinking to foster innovation and deliver value. Contribute to both delivery and business development activities within the FS&I practice. Key Responsibilities Business Analysis & Delivery Act as the bridge between technical delivery teams and business stakeholders. Elicit, analyse, and document business requirements, user stories, and acceptance criteria. Support solution design in collaboration with architects and designers to ensure alignment with business needs. Work within Agile teams (Scrum / Kanban), participating in ceremonies (backlog refinement, sprint planning, reviews, retrospectives). Maintain a good understanding of latest technologies, data, AI, and digital trends in Financial Services & Insurance. Identify opportunities to incorporate emerging technologies into client solutions. Apply design thinking techniques to explore and validate innovative ideas and customer journeys. Client Engagement & Business Development Build strong relationships with client stakeholders across business and IT. Contribute to sales proposals, RFP responses, and client pitches. Support the development of Amaris FS&I offerings and accelerators for the insurance sector. What We're Looking For Experience & Background 5+ years of experience in a technology focused role within management consulting or change/transformation teams. Substantial experience in the Financial Services & Insurance industry, ideally with exposure to: General insurance, life & pensions, or specialty lines. Policy administration, underwriting, claims, or digital distribution. Demonstrated success in leading and delivering complex programmes across business and technology. Skills & Strengths Strong communication, listening, influencing, and interpersonal skills. Creative and curious mindset with strong analytical and problem solving abilities. Advanced planning and organisational skills; able to manage multiple workstreams. Comfortable navigating ambiguity and working in a self directed manner. Strategic thinker, value driven, with a strong delivery focus. Good understanding of leading technologies, data, AI, and digital in FS&I, and ability to spot opportunities to leverage them. Great team player, collaborative and supportive in multi disciplinary teams. Education & Certifications Bachelor's or Master's degree in STEM, Business, or a related field. MBA is preferred. Additional certifications are a plus (e.g. PMP, Agile/Scrum, PSPO/CSPO, CBAP). What we offer An international community bringing together 110+ different nationalities An environment where trust has a central place: 70% of our key leaders started their careers at the first level of responsibilities A robust training system with our internal Academy and 250+ available modules A vibrant workplace that frequently gathers for internal events (afterworks, team buildings, etc.) Amaris Consulting is proud to be an equal opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.
05/07/2026
Full time
Join our team and start a new adventure in a dynamic environment, where you will be able to fulfil your career expectations in a fast-growing organization. Being a consultant at Amaris Consulting means positioning yourself as a technical and functional expert, but above all, being an ambassador of our organization to clients, thanks to: Your interpersonal skills and ability to listen, in order to build a strong relationship of trust with our clients and fully understand their challenges and issues. Your curiosity and eagerness to learn, as we support over 1,000 clients from all sectors. Your Role As a Business Analyst focused on Insurance, you will be the conduit between business and technology for our clients. You will: Work closely with business product owners, solution architects, designers, developers, and quality engineers. Use an agile, iterative approach and design thinking to foster innovation and deliver value. Contribute to both delivery and business development activities within the FS&I practice. Key Responsibilities Business Analysis & Delivery Act as the bridge between technical delivery teams and business stakeholders. Elicit, analyse, and document business requirements, user stories, and acceptance criteria. Support solution design in collaboration with architects and designers to ensure alignment with business needs. Work within Agile teams (Scrum / Kanban), participating in ceremonies (backlog refinement, sprint planning, reviews, retrospectives). Maintain a good understanding of latest technologies, data, AI, and digital trends in Financial Services & Insurance. Identify opportunities to incorporate emerging technologies into client solutions. Apply design thinking techniques to explore and validate innovative ideas and customer journeys. Client Engagement & Business Development Build strong relationships with client stakeholders across business and IT. Contribute to sales proposals, RFP responses, and client pitches. Support the development of Amaris FS&I offerings and accelerators for the insurance sector. What We're Looking For Experience & Background 5+ years of experience in a technology focused role within management consulting or change/transformation teams. Substantial experience in the Financial Services & Insurance industry, ideally with exposure to: General insurance, life & pensions, or specialty lines. Policy administration, underwriting, claims, or digital distribution. Demonstrated success in leading and delivering complex programmes across business and technology. Skills & Strengths Strong communication, listening, influencing, and interpersonal skills. Creative and curious mindset with strong analytical and problem solving abilities. Advanced planning and organisational skills; able to manage multiple workstreams. Comfortable navigating ambiguity and working in a self directed manner. Strategic thinker, value driven, with a strong delivery focus. Good understanding of leading technologies, data, AI, and digital in FS&I, and ability to spot opportunities to leverage them. Great team player, collaborative and supportive in multi disciplinary teams. Education & Certifications Bachelor's or Master's degree in STEM, Business, or a related field. MBA is preferred. Additional certifications are a plus (e.g. PMP, Agile/Scrum, PSPO/CSPO, CBAP). What we offer An international community bringing together 110+ different nationalities An environment where trust has a central place: 70% of our key leaders started their careers at the first level of responsibilities A robust training system with our internal Academy and 250+ available modules A vibrant workplace that frequently gathers for internal events (afterworks, team buildings, etc.) Amaris Consulting is proud to be an equal opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.