Senior Compliance Engineer

At Sonatus, we are building the "Fastest yet Safest" software for the Software-Defined Vehicle (SDV) era. As we accelerate innovation, maintaining the highest standards of safety and security is paramount.

We are looking for a Senior Compliance Engineer to oversee our engineering compliance and quality strategy. You will play a pivotal role in balancing agile execution with automotive rigor.

In this position, you will join the Compliance Squad, serving as a key contributor of A-SPICE, Cybersecurity (ISO 21434), and Process Quality. You will collaborate with the team to help maintain quality gates for product releases.

• Assist in maintaining quality gates for software releases. You participate in the strategy to approve product deployment based on objective quality criteria and compliance readiness.
• Review validation results from the release pipeline and external partners to ensure "Production-Ready" standards are met before final delivery.

• Implement and follow a "Lightweight yet Compliant" engineering process based on A-SPICE, integrated seamlessly into Jira/Confluence/Jama workflows.
• Cybersecurity: Support the execution of ISO 21434 compliance tasks. Conduct Threat Analysis and Risk Assessment (TARA), OSS CVE and ensure security controls are properly implemented.

• Customer Reporting: Own the delivery of official static analysis reports to OEM customers, covering MISRA C++, RTE, CERT C++, and HIS Metrics.
• Issue Management: Prioritize code quality violations and collaborate with Engineering Squads to track "Must-Fix" issues to closure.
• Technical Defense: Lead the technical justification process for rule deviations and handle customer inquiries regarding code quality.

• Provide technical support for external audits and compliance assessments. 

• Education: B.S. or higher in Computer Science, Electrical Engineering, or a related field.
• Experience: 3–7 years of experience in Automotive Software Quality or Systems Engineering.

• Deep Knowledge: Expert-level understanding of Automotive SPICE (ASPICE) AND/OR ISO 21434 (Cybersecurity).
• Static Analysis Mastery: Proficiency in managing code quality standards (MISRA C/C++, RTE, CERT C++) using tools like Coverity, Polyspace, or QAC.
• Process Expertise: Hands-on experience with Automotive SPICE (ASPICE) assessment and process definition.
• Audit Experience: Hands-on experience supporting or defending external audits, including preparing evidence and technical documentation.
• Collaboration: Proven ability to work effectively within cross-functional engineering teams to drive quality and compliance outcomes.

• Engineering Background: Experience as a software developer or architect is a strong plus. Specifically:
  • Build & Dependencies: Familiarity with build systems like Yocto (Bitbake) or CMake to configure static analysis captures and accurately trace OSS dependencies.
  • Kernel & OS Hardening: Experience with Linux Kernel configuration (Kconfig) and security hardening (e.g., SELinux, Secure Boot) to validate OS-level compliance strategies.
  • System Architecture: Understanding of HW/SW interfaces (MMU, Hypervisors) to assess Freedom From Interference (FFI) mechanisms for Functional Safety concepts.

• Global Communication: Fluency in English (Written & Verbal) to communicate with HQ and global OEM customers.
• Adaptability: Ability to build and optimize processes in a fast-paced, growth-oriented environment.

• Certifications: Certified Functional Safety Expert/Professional (CFSE/CFSP), Cybersecurity certification (CACSP), or ASPICE Assessor qualification.
• Toolchain: Proficiency in Jira/Confluence for process management and Requirements Management tools (Jama, CodeBeamer).

• Departmental team building and outings
• Employee Referral Program
• Culture/Employee Satisfaction Surveys - Feedback matters!
• Innovative Award Program (annual)