Cyber Security Engineer

Before the detail, here's the challenge you'd help us solve. We build the embodied intelligence that moves real vehicles safely, and the ecosystem a billion machines will run on in the future. Very few people in AI can say this. Every role here, whatever the team, plugs into that. Here’s what this particular role covers. 🛠️ About our team We’re seeking an exceptional Cyber Security Engineer to join our Germany-based team, focused on localising and advancing Wayve’s autonomous driving technology for the German market. This is a unique opportunity to play a hands-on role in shaping our AV capabilities in Germany from the ground up. 🧠 Your day-to-day • TARA Assessment of core onboard SW • Define system assets , define preliminary security level architecture • Lead TARA assessment per architecture definition • Derive external and internal vulnerabilities and control mitigations • Cybersecurity Concept and Plan • Formulate a cybersecurity concept and plan that supports OEM cybersecurity compliance. • Enlist both onboard and development SW and third party library entry points and risks and mitigation plans. • Lead SW DevOp security requirements and validation • Lead specifications for SW DevOp nightly regression flow with respect to security screening • Lead design reviews, define a method and a flow for security improvements, vulnerability and pentests. • OEM and Tier 1 cybersecurity collaboration • Engage with OEMs and Tier 1s to align on external requirements/assumptions based on formulated cybersecurity concept. • Penetration testing alignment: Collaborating live with security consultants or red teams • Joint physical reviews of hardware trust boundaries, key provisioning, secure boot integration, etc. 🧩 What you’ll be working on As part of our mission to scale end-to-end embodied AI for autonomous driving, we are building a fully automotive compliant ML software product. As an integral part of production compliance and being active in supporting customers complying ISO/SAE 21434, we are looking for an experienced system-minded cybersecurity engineer to lead the security threat analysis and risk assessment of on-board software development process and its in vehicle integration, derive cybersecurity concept and plan and continuously support our SW development cycle from the cybersecurity standpoint. This role will be critical in defining what level and mitigation policies the company must follow as part of DevOp operation and which security assumptions are translated to OEM and Tier 1 responsibilities as part of the in-vehicle architecture, in order to deploy our embodied AI models in compliance with cybersecurity goals. 🙌 You should apply if Essential • 5+ years experience in cybersecurity systems engineering. • Proven experience orchestrating company’s cybersecurity DevOp policies, running report investigations and ability to drive SW improvements with respect to cybersecurity. • Ability to apply TARA (Threat Analysis and Risk Assessment), experience with STRIDE, HEAVENS 2.0, attack trees, or similar frameworks • Understanding of ISO/SAE 21434 and mapping threats to cybersecurity goals • Skill in assessing impact × feasibility, and converting results into mitigations • Familiarity with Secure Boot, TPM, HSMs, and key provisioning • Understanding of vehicle trust boundaries, secure diagnostics, and network segmentation • Hands-on experience in: • Fuzzing, static analysis, reverse engineering • Familiarity with CVEs and common vulnerability classes in C/C++/Python codebases • Using tools like: Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL, etc. • Secure Software Engineering • Systems Integration & Testing • Comfort working with CI/CD pipelines to enforce security gates • Ability to work cross-functionally and translate domain analysis into technical and product requirements. • Experience working in an agile, fast-scaling environment with a strong execution mindset. Desirable: Familiarity with automotive systems cybersecurity, knowledge of ECU architecture and protocols. 🌱 Not ticking every box? That’s totally okay! If you’re passionate about autonomy and keen to learn, we encourage you to apply even if you don’t meet every requirement. More about Wayve: 🚀 Wayve is building the leading AI platform for autonomous driving. We are pioneering an end to end AI approach that enables vehicles to learn directly from real world experience, developing the ability to adapt, generalise and improve at scale. Instead of relying on hand coded rules or pre mapped environments, our AI Driver learns to drive by understanding the world around it. The result is technology that navigates complex urban environments with intelligence, precision and natural flow, unlocking meaningful advances in both safety and efficiency. We believe autonomy represents a once in a generation transformation in how people and goods move, comparable to the shift from horses to cars, and from human driven vehicles to intelligent machines. Our ambition is to make autonomy universal. Wayve’s mapless and hardware agnostic AI platform integrates with global OEM partners, enabling continuous software evolution and unlocking advanced levels of automation from L2 plus through to L4 as our core AI model scales. In a race increasingly defined by intelligence and real world learning, Wayve is taking a distinct approach, building a generalisable driving intelligence that can power any vehicle, anywhere. By combining embodied AI with scalable deployment, we are creating technology that can be shaped to each OEM brand and driver experience, accelerating the transition to a safer, more intelligent future of mobility. How we work 💻- Locations & Flexible Working: Our main hubs are in London, Sunnyvale, Yokohama, Herzliya, Vancouver and Leonberg. We operate a hybrid working model that combines in-person collaboration in our dedicated office spaces with focused time working remotely. This gives our teams the connection and energy of working together, alongside the flexibility to do their best work in a way that fits their lives. 🔍 The Interview Process: Our process is clear and respectful of your time: • Initial call / recruiter screen (30 mins) • Competency Interviews [Domain Knowledge, 60mins] • Deep-dive technical interviews [Security Strategy Presentation, 60mins, Cross Functional SW Architecture, 60mins, Platform, 60mins] • Final interview: [Mission & Values alignment, 30mins]. We’ll always explain the format and work around your availability. What’s in it for you (Location dependant): 💰 Salaries benchmarked against the market annually 📈 Meaningful equity, sharing in the ownership and long term success of Wayve ✈️ Relocation support and visa sponsorship where applicable ✅ Hybrid working, core hours and the chance to work hands on in vehicle workshops and labs 📚 Learning and development budgets with support for training, conferences and growth 🩺 Comprehensive benefits including health insurance, dental, enhanced maternity and paternity leave, retirement or pension where applicable, access to therapists, wellbeing partnerships, team socials and more A quick, honest note before you apply. Wayve is not a mature, fully-structured place with the playbook already written. Much of how we work is still being written, and if you join, you’ll help write it. That suits people who want real ownership more than people who need a settled structure from day one. If that sounds like the kind of problem you want to spend your time on, we’d really like to hear from you. At Wayve we're committed to creating a diverse, fair and respectful culture that is inclusive of everyone based on their unique skills and perspectives, and regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, veteran status, pregnancy or related condition (including breastfeeding) or any other basis as protected by applicable law. For more information visit Careers at Wayve. https://wayve.ai/careers/ To learn more about what drives us, visit Values at Wayve https://wayve.ai/careers/ DISCLAIMER: We will not ask about marriage or pregnancy, care responsibilities or disabilities in any of our job adverts or interviews. However, we do look to capture information about care responsibilities, and disabilities among other diversity information as part of an optional DEI Monitoring form to help us identify areas of improvement in our hiring process and ensure that the process is inclusive and non-discriminatory.