Cyber Security Engineer

Cyber StrategiX; Leonberg; Ibrido; EUR 90.000 - 120.000; Tempo pieno

Descrizione del lavoro

Wayve is seeking a seasoned cybersecurity engineer to join our Germany-based team, focusing on localising and advancing our autonomous driving tech for the German market. You will shape the security concept and drive risk assessment across in-vehicle and development pipelines, ensuring compliant security practices throughout the software lifecycle.

This hands-on role collaborates with OEMs, Tier 1s and security experts, contributing to secure boot, trust boundaries, and robust DevOps security

Competenze

• 5+ years in cybersecurity systems engineering.
• Experience driving cybersecurity DevOps policies and security improvements.
• Hands-on with TARA, STRIDE, HEAVENS 2.0 or similar frameworks.
• Understanding ISO/SAE 21434 threat mapping and security goals.
• Ability to assess impact vs feasibility and translate to mitigations.
• Familiarity with Secure Boot, TPM, HSMs and key provisioning.
• Knowledge of vehicle trust boundaries and network segmentation.
• Experience with fuzzing, static analysis, reverse engineering; CVEs awareness.
• Proficient with tools like Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL.
• Experience with secure software engineering, CI/CD gates, and cross-functional work.

Mansioni

• Define system assets and preliminary security level architecture.
• Lead TARA assessment per architecture definition.
• Derive external and internal vulnerabilities and mitigations.
• Formulate cybersecurity concept and plan for OEM compliance.
• Identify onboard and development software entry points and risks; plan mitigations.
• Lead SW DevOp security requirements and nightly regression flow.
• Lead design reviews and establish security improvement flows and pentests.
• Engage OEMs and Tier 1s on external requirements based on the cybersecurity concept.
• Coordinate penetration testing with security consultants or red teams.
• Joint physical reviews of hardware trust boundaries and secure boot integration.

Conoscenze

Cybersecurity systems engineering

Cybersecurity DevOps policies

TARA risk assessment

Threat modeling (STRIDE/HEAVENS)

ISO/SAE 21434 mapping

Vulnerability assessment

Secure Boot / TPM / HSMs

Vehicle trust boundaries

Fuzzing / static analysis / reverse

C/C++/Python security

CI/CD security gates

Cross-functional collaboration

Agile environment

Strumenti

Wireshark

CANoe

Binwalk

Ghidra

IDA

Metasploit

AFL

Descrizione del lavoro

Before the detail, here's the challenge you'd help us solve.

We build the embodied intelligence that moves real vehicles safely, and the ecosystem a billion machines will run on in the future. Very few people in AI can say this. Every role here, whatever the team, plugs into that.

Here’s what this particular role covers.

About our team

We’re seeking an exceptional Cyber Security Engineer to join our Germany-based team, focused on localising and advancing Wayve’s autonomous driving technology for the German market. This is a unique opportunity to play a hands‑on role in shaping our AV capabilities in Germany from the ground up.

Your day-to-day

• TARA Assessment of core onboard SW

  • Define system assets , define preliminary security level architecture

  • Lead TARA assessment per architecture definition

  • Derive external and internal vulnerabilities and control mitigations

• Cybersecurity Concept and Plan

  • Formulate a cybersecurity concept and plan that supports OEM cybersecurity compliance.

  • Enlist both onboard and development SW and third party library entry points and risks and mitigation plans.

• Lead SW DevOp security requirements and validation

  • Lead specifications for SW DevOp nightly regression flow with respect to security screening

  • Lead design reviews, define a method and a flow for security improvements, vulnerability and pentests.

• OEM and Tier 1 cybersecurity collaboration

  • Engage with OEMs and Tier 1s to align on external requirements/assumptions based on formulated cybersecurity concept.

  • Penetration testing alignment: Collaborating live with security consultants or red teams

  • Joint physical reviews of hardware trust boundaries, key provisioning, secure boot integration, etc.

What you’ll be working on

As part of our mission to scale end-to-end embodied AI for autonomous driving, we are building a fully automotive compliant ML software product. As an integral part of production compliance and being active in supporting customers complying ISO/SAE 21434, we are looking for an experienced system‑minded cybersecurity engineer to lead the security threat analysis and risk assessment of on‑board software development process and its in vehicle integration, derive cybersecurity concept and plan and continuously support our SW development cycle from the cybersecurity standpoint.

This role will be critical in defining what level and mitigation policies the company must follow as part of DevOp operation and which security assumptions are translated to OEM and Tier 1 responsibilities as part of the in‑vehicle architecture, in order to deploy our embodied AI models in compliance with cybersecurity goals.

You should apply if

Essential

• 5+ years experience in cybersecurity systems engineering.

• Proven experience orchestrating company’s cybersecurity DevOp policies, running report investigations and ability to drive SW improvements with respect to cybersecurity.

• Ability to apply TARA (Threat Analysis and Risk Assessment), experience with STRIDE, HEAVENS 2.0, attack trees, or similar frameworks

• Understanding of ISO/SAE 21434 and mapping threats to cybersecurity goals

• Skill in assessing impact × feasibility, and converting results into mitigations

• Familiarity with Secure Boot, TPM, HSMs, and key provisioning

• Understanding of vehicle trust boundaries, secure diagnostics, and network segmentation

• Hands‑on experience in:

  • Fuzzing, static analysis, reverse engineering

  • Familiarity with CVEs and common vulnerability classes in C/C++/Python codebases

  • Using tools like: Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL, etc.

  • Secure Software Engineering

  • Systems Integration & Testing

  • Comfort working with CI/CD pipelines to enforce security gates

• Ability to work cross‑functionally and translate domain analysis into technical and product requirements.

• Experience working in an agile, fast‑scaling environment with a strong execution mindset.

Desirable

Familiarity with automotive systems cybersecurity, knowledge of ECU architecture and protocols.

More about Wayve:

Wayve is building the leading AI platform for autonomous driving. We are pioneering an end to end AI approach that enables vehicles to learn directly from real world experience, developing the ability to adapt, generalise and improve at scale. Instead of relying on hand coded rules or pre mapped environments, our AI Driver learns to drive by understanding the world around it. The result is technology that navigates complex urban environments with intelligence, precision and natural flow, unlocking meaningful advances in both safety and efficiency. We believe autonomy represents a once in a generation transformation in how people and goods move, comparable to the shift from horses to cars, and from human driven vehicles to intelligent machines.

Our ambition is to make autonomy universal. Wayve’s mapless and hardware agnostic AI platform integrates with global OEM partners, enabling continuous software evolution and unlocking advanced levels of automation from L2 plus through to L4 as our core AI model scales. In a race increasingly defined by intelligence and real world learning, Wayve is taking a distinct approach, building a generalisable driving intelligence that can power any vehicle, anywhere. By combining embodied AI with scalable deployment, we are creating technology that can be shaped to each OEM brand and driver experience, accelerating the transition to a safer, more intelligent future of mobility.

How we work - Locations & Flexible Working:

Our main hubs are in London, Sunnyvale, Yokohama, Herzliya, Vancouver and Leonberg. We operate a hybrid working model that combines in‑person collaboration in our dedicated office spaces with focused time working remotely. This gives our teams the connection and energy of working together, alongside the flexibility to do their best work in a way that fits their lives.

The Interview Process:

Our process is clear and respectful of your time:

• Initial call / recruiter screen (30 mins)

• Competency Interviews [Domain Knowledge, 60mins]

• Deep‑dive technical interviews [Security Strategy Presentation, 60mins, Cross Functional SW Architecture, 60mins, Platform, 60mins]

• Final interview: [Mission & Values alignment, 30mins].

We’ll always explain the format and work around your availability.

What’s in it for you (Location dependant):

Salaries benchmarked against the market annually
Meaningful equity, sharing in the ownership and long term success of Wayve
Relocation support and visa sponsorship where applicable
Hybrid working, core hours and the chance to work hands on in vehicle workshops and labs
Learning and development budgets with support for training, conferences and growth
Comprehensive benefits including health insurance, dental, enhanced maternity and paternity leave, retirement or pension where applicable, access to therapists, wellbeing partnerships, team socials and more

A quick, honest note before you apply.

Wayve is not a mature, fully‑structured place with the playbook already written. Much of how we work is still being written, and if you join, you’ll help write it. That suits people who want real ownership more than people who need a settled structure from day one.

At Wayve we're committed to creating a diverse, fair and respectful culture that is inclusive of everyone based on their unique skills and perspectives, and regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, veteran status, pregnancy or related condition (including breastfeeding) or any other basis as protected by applicable law.

For more information visit Careers at Wayve. To learn more about what drives us, visit Values at Wayve

DISCLAIMER: We will not ask about marriage or pregnancy, care responsibilities or disabilities in any of our job adverts or interviews. However, we do look to capture information about care responsibilities, and disabilities among other diversity information as part of an optional DEI Monitoring form to help us identify areas of improvement in our hiring process and ensure that the process is inclusive and non‑discriminatory.