Cyber Security Engineer

In this role you will lead cybersecurity for Wayve’s onboard software in the German market, shaping secure integration of autonomous driving tech. You will define asset security levels and drive threat analysis, forming a cybersecurity concept and plan to support OEM compliance. You’ll steer DevOps security requirements and validation, coordinating with OEMs/Tier 1s and aligning on security testing. The position involves hands-on vulnerability mitigation, hardware trust boundaries, and cross-functional collaboration to enable safe, scalable autonomous driving deployments.

• salary benchmarking
• equity
• relocation support and visa sponsorship
• hybrid working
• learning and development budget
• health insurance and dental coverage

• Perform TARA assessment per architecture definition and define system security levels
• Develop and maintain a cybersecurity concept and plan aligned with OEM requirements
• Lead DevOps security requirements, security screening in nightly regression flow, and vulnerability management
• Lead design reviews for security improvements, pentests, and secure development lifecycle
• Collaborate with OEMs and Tier 1s to align external security requirements and mitigation strategies
• Coordinate penetration testing with security consultants or red teams and review hardware trust boundaries

• 5+ years in cybersecurity systems engineering
• Experience with DevOps security policies and security-focused SW improvements
• Proficiency with TARA, STRIDE, HEAVENS 2.0, attack trees (or similar)
• Understanding of ISO/SAE 21434 and threat-to-goal mapping
• Ability to assess impact and translate to mitigations
• Familiarity with Secure Boot, TPM, HSMs, and key provisioning
• Knowledge of vehicle trust boundaries, secure diagnostics, and network segmentation
• Hands-on experience in fuzzing, static analysis, reverse engineering
• Experience with CVEs and security tools (C/C++/Python)
• Familiarity with Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL
• Secure Software Engineering
• Systems Integration & Testing
• CI/CD security gates
• Cross-functional translation of domain analysis into product requirements
• Experience in agile, fast-scaling environments

• cross-functional collaboration
• execution mindset
• communication of technical concepts to non-technical stakeholders
• TARA/Threat Modeling
• STRIDE/HEAVENS 2.0
• ISO/SAE 21434 knowledge