Technical Project Management · Embedded & Automotive Security · Engineering
Embedded systems,
built secure from the start.
I'm Michael Hornung. For over 15 years I've been building embedded systems on Linux and microcontrollers, including security architecture for automotive ECUs. Today I lead technical projects and help teams design, build and secure their embedded and automotive products, 100 % remote.
Services
Technical Project Management
I talk to engineers, suppliers and management and keep complex embedded projects moving, in ASPICE-driven environments as well.
Embedded Security
Secure design, secure boot, key handling, hardening and security reviews for embedded devices, including hands-on training for your team.
Automotive Security
Threat analysis and risk assessment (TARA), security concepts and cybersecurity management according to ISO/SAE 21434 and UNECE R155/R156, from SecOC and HSM to secure diagnostics and software updates.
Embedded Engineering
Embedded Linux, Zephyr and bare-metal firmware: board bring-up, drivers, toolchains and cross-builds.
Automotive Engineering
ECU software from requirements and architecture to integration with OEMs and suppliers, with ASPICE-compliant development.
Cyber Resilience Act
Already applies
Since 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe security incidents in their products with digital elements, such as connected IoT devices.
From 11 December 2027
The main obligations will apply: essential cybersecurity requirements, vulnerability handling and conformity assessment for products with digital elements. The manufacturer carries the primary responsibility.
Where I come from
The core of the CRA – threat analysis, secure updates, vulnerability handling over the product lifetime – is what ISO/SAE 21434 and UNECE R155/R156 have required in automotive for years. That is where my experience lies, and I am currently getting up to speed on the CRA itself. This is no legal advice.
Experience
How I work
-
01
First call
We go through your problem, your product and the constraints, and agree on what needs to be done.
-
02
Offer
You receive a written proposal with scope, approach and effort.
-
03
Remote collaboration
I work 100 % remote, with your tools and processes, and keep you up to date with regular status reports.
Let's talk about your project.
Whether you need extra capacity, a security review or someone to get a stalled project moving, send me a short message. I usually reply within one business day.
info@hornung-embedded.org