Lead Embedded Security Engineer, Automotive Firmware

Wayve; Sunnyvale (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity

Relocation support

Hybrid working

Learning & development budget

Comprehensive benefits

Job summary

Wayve is seeking a Staff Embedded Security Engineer to partner with embedded software teams across boot, OS, and vehicle data workflows. You’ll design controls, review architectures, and implement practical security measures for real-time firmware and embedded Linux systems.

You’ll work with cryptography concepts, hardware-backed security (TrustZone, HSMs, secure boot), and threat modelling to balance security with performance and developer velocity across vehicle fleets.

Qualifications

• Design and deliver security systems for connected Linux-based embedded devices.
• Hands-on hardware-backed security in production systems.
• Understand cryptography fundamentals and PKI.
• System-level development on kernels/bootloaders/embedded OS.

Responsibilities

• Design and develop security controls in real-time embedded firmware and embedded Linux software.
• Review code and designs to identify vulnerabilities and guide remediation.
• Contribute to requirements, architecture docs, interface definitions, and test plans.
• Partner with Wayve Security to address fleet-wide risks.
• Build and maintain security tooling, libraries, controls, and instrumentation.
• Act as security contact for engineering teams and penetration engagements.

Skills

Embedded security

Linux security

Python

C++

Go

Penetration testing

Security tooling

Cryptography basics

System security architecture

Tools

HSMs

TrustZone

Secure boot

Key management

Yocto / RTOS

Job description

Wayve is seeking a Staff Embedded Security Engineer to partner with embedded software teams across boot, OS, and vehicle data workflows. You’ll design controls, review architectures, and implement practical security measures for real-time firmware and embedded Linux systems.

You’ll work with cryptography concepts, hardware-backed security (TrustZone, HSMs, secure boot), and threat modelling to balance security with performance and developer velocity across vehicle fleets.