Cyber Security Engineer

Overview

As a Cyber Security Engineer at Wayve, you will shape automotive security for our Germany market, aligning in-vehicle software with ISO/SAE 21434 and driving threat analyses for safe deployment of embodied AI. You’ll collaborate across OEMs, Tier 1s, and development teams to implement security concepts, risk mitigations, and DevOps security practices. Your work enables scalable, compliant security for our autonomous driving platform, from model-in-the-vehicle integration to ongoing security validation. This role offers hands-on impact in a fast-scaling, innovative environment.

Pay / Benefits

• salary benchmarked against market
• equity/share in Wayve
• relocation support and visa sponsorship
• hybrid working model
• learning and development budgets
• comprehensive benefits (health, dental, parental leave)

Responsibilities

• Perform TARA assessment of core onboard software and define security level architecture
• Lead TARA assessment per architecture and derive vulnerabilities with mitigations
• Formulate a cybersecurity concept and plan supporting OEM cybersecurity compliance
• Identify onboard, development software, and third-party library entry points and associated risks
• Lead security requirements for SW DevOps and define nightly regression security screening
• Oversee security-focused design reviews, improvements, and vulnerability/pentest workflows
• Engage with OEMs and Tier 1s to align external requirements with the cybersecurity concept
• Coordinate penetration testing with security consultants or red teams
• Participate in joint hardware trust boundary reviews and secure boot integration

Key requirements

• 5+ years in cybersecurity systems engineering
• Experience leading cybersecurity DevOps policies and security-driven SW improvements
• Proficiency with TARA, STRIDE, HEAVENS 2.0, attack trees, or similar frameworks
• Understanding of ISO/SAE 21434 and threat-to-goal mapping
• Ability to assess impact and translate into mitigations
• Familiarity with Secure Boot, TPM, HSMs, and key provisioning
• Understanding of vehicle trust boundaries, secure diagnostics, and network segmentation
• Hands-on experience in fuzzing, static analysis, reverse engineering
• Familiarity with CVEs and vulnerability classes in C/C++/Python
• Experience with tools like Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL
• Secure Software Engineering and CI/CD security gates
• Ability to translate domain analysis into technical/product requirements
• Experience in agile, fast-scaling environments

• cross-functional collaboration
• strong execution mindset
• ability to translate domain analysis into requirements
• TARA and threat modeling
• ISO/SAE 21434
• Secure Boot, TPM, HSMs

…