SOURAV PAL

Senior Embedded Security Engineer

Krakow, PL.

About

Senior Embedded Security Engineer with over 12 years of expertise in architecting and implementing robust cybersecurity solutions for embedded systems

Work

Aptiv

|

Senior Technical Lead

Poland, Poland

→

Highlights

Implemented Secure Boot solution on Qualcomm 8295 SoC for VGTT ICM, integrating cryptographic chain of trust and key provisioning to enhance system integrity and implemented Certificate management app in POSIX based QNX RTOS

Designed comprehensive DAC/MAC security policies for the VGTT ICM project, implementing secpols across QNX system processes to bolster access control.

Conducted detailed TARA activities, deriving critical cybersecurity requirements from stakeholder needs and ensuring ISO 21434 compliance.

Implemented robust UART/USB security hardening, effectively eliminating debug interface attack vectors in production environments.

GlobalLogic Poland

|

Senior Software Engineer

Krakow, Lesser Poland Voivodeship, Poland

→

Highlights

Contributed to security architecture design for smart cockpit on Qualcomm 8255, implementing threat modeling activities per ISO 21434 and designing DAC/MAC access control policies to isolate camera and display components.

Designed and implemented secure credential lifecycle management, leveraging TPM for hardware-backed key storage and PKCS#11 interface for secure cryptographic operations.

Drove ASPICE audit readiness initiatives, producing comprehensive security compliance documentation and requirements traceability, achieving successful audit outcomes.

Tata Motors

|

Senior Manager

Pune, Maharashtra, India

→

Summary

Managed telematics ECU architecture with a focus on security-aware design and translated complex stakeholder requirements into technical specifications.

Highlights

Led the telematics ECU architecture, incorporating security-aware design for features like remote engine start, E-Call, and Driving Score.

Translated complex stakeholder security requirements into precise technical cybersecurity specifications and architectural designs, ensuring alignment with business needs.

Managed Tier 1 supplier relationships effectively, deploying critical features across multiple production vehicle lines and achieving successful integration.

Magna Steyr Engineering

|

Development Engineer

Stuttgart, Baden-Württemberg, Germany

→

Summary

Designed secure camera calibration systems and developed AUTOSAR modules for automotive communication.

Highlights

Designed and implemented a secure camera calibration and dirt detection system on NVIDIA Jetson, integrating C++/Bash for robust performance.

Developed AUTOSAR RTE/COM modules with secure automotive communication patterns, enhancing data integrity and reliability.

Technology & Strategy GmbH

|

Consultant

Stuttgart, Baden-Württemberg, Germany

→

Summary

Developed a critical diagnostic event management module for autonomous driving ECUs.

Highlights

Developed a Diagnostic Event Management module for autonomous driving ECU, incorporating E2E PDU protection to ensure data integrity and system reliability.

Harman International

|

Senior Software Engineer

Bangalore, Karnataka, India

→

Summary

Architected HMI Adapter Layer middleware for instrument clusters, focusing on secure state management.

Highlights

Architected HMI Adapter Layer middleware on QNX, implementing secure state management for instrument clusters to ensure robust and reliable operation.

Robert Bosch Engineering

|

Senior Software Engineer

Coimbatore, Tamil Nadu, India

→

Summary

Designed instrument cluster display modules with data validation and safe state handling.

Highlights

Designed instrument cluster display modules, integrating advanced data validation and safe state handling mechanisms to enhance system reliability and user experience.

L&T Technology Services

|

Software Engineer

India, , India

→

Summary

Developed industrial valve automation firmware with secure communication protocols.

Highlights

Developed industrial valve automation firmware on TI Tiva microcontrollers, incorporating secure communication protocols to ensure robust and protected operations.

Education

West Bengal University of Technology

, West Bengal, India
→
B.Tech Electronics & Communication Engineering

Skills

Security Architecture

Secure Boot design, Cryptography & PKI, Key management, DAC/MAC access control, TARA & threat modeling, Security policy design, Vulnerability assessment.

Hardware Platforms

Qualcomm 8295 SoC, Qualcomm 8255 SoC, ARM A-Profile cores, QNX RTOS & BSP.

Programming Languages

Embedded C (12+ yrs), C++ (C++17, C++14), Bash scripting.

Standards & Methodology

ISO 21434, ASPICE, AUTOSAR, MISRA C, SAFe Agile.

Tools

GitLab CI/CD, Jenkins, IBM DOORS, Confluence, Parasoft, Trace32, CANoe, Vector DaVinci.