BMW Group

INNOVATION IS IMAGINING WHAT NO ONE ELSE CAN.

At the BMW Group, everything starts with passion. It turns a profession into a vocation. It drives us to keep reinventing mobility and bring innovative ideas onto the roads. Enthusiasm for joint projects turns a team into a strong unit where every opinion is valued. It is only when expertise, highly professional processes and enjoyment of work unite that we can shape the future together.

Our team is responsible for IT security across the entire ConnectedDrive Offboard Platform. We are a multidisciplinary group of internal software engineers and product owners who develop and operate cybersecurity processes and solutions, while driving IT security governance across the platform.

What awaits you?

• You develop and maintain an agentic AI toolchain for the automated vulnerability assessment of our backend systems.
• You design automated methods for identifying vulnerabilities in source code and backend functionalities using both commercial and open-source AI models.
• By expanding AI-powered analysis, fuzzing, and penetration testing workflows, you continuously enhance our security assessment capabilities.
• You integrate new analysis techniques, models, and AI agents into the existing toolchain in a targeted and scalable manner.
• Through the design of intuitive frontends, you enable both security experts and software engineers to easily leverage the capabilities of the toolchain.
• You automate build, deployment, and testing processes using CI/CD pipelines (e.g., GitHub Actions, GitLab CI) and Infrastructure-as-Code frameworks (e.g., Terraform, Ansible).
• In addition, you implement closed-loop feedback and learning mechanisms to continuously optimize future analysis cycles.

What should you bring along?

• University degree in Computer Science or a comparable IT-related field.
• Several years of professional experience in Automotive Cybersecurity.
• Strong expertise in building, operating, and maintaining agentic AI toolchains using both commercial and open-source technologies.
• Experience in developing or operating complex security toolchains (e.g., static and dynamic code analysis, fuzzing, and penetration testing tools).
• Hands‑on experience with cloud platforms (AWS/Azure), containerization and orchestration technologies (Docker/Kubernetes), as well as CI/CD and Infrastructure-as-Code tools (e.g., Terraform, Ansible, GitHub Actions/GitLab CI).
• Business‑fluent German and English language skills.

What we offer?

• Challenging projects with which we are shaping the mobility of tomorrow together.
• Wide range of personal and professional development opportunities.
• Attractive, fair and performance-related remuneration.
• High level of job security.
• Annual special payments such as vacation pay, Christmas bonus, and profit sharing.
• Flexible working hours including 6 weeks annual leave and overtime compensation.

Start date: from now on
Working hours: Full-time

At the BMW Group, we place great importance on equal treatment and equal opportunities. Our recruiting decisions are based on the personality, experience, and skills of the applicants.