Staff Embedded Security Engineer

As a Staff Embedded Security Engineer, you partner with embedded software teams to secure Wayve’s automotive-grade software stack. You will shape risk-based security controls across boot, OS, and vehicle data flows, while collaborating with the Security team to protect the fleet. You’ll design and implement practical security features in real-time firmware and embedded Linux, balancing security with performance and developer velocity. This is a hands-on, impact-driven role at the intersection of hardware and software in a fast-growing autonomous-driving platform.

• salary benchmarked against market
• equity
• relocation support and visa sponsorship
• hybrid working with core hours
• learning and development budgets
• comprehensive health and wellbeing benefits

• Design and implement security controls in real-time embedded firmware and embedded Linux
• Review code and architectures to identify vulnerabilities and guide remediation
• Contribute to requirements, architecture documents, interface definitions, test plans
• Collaborate with Wayve Security to assess risks across the fleet
• Build and maintain security tooling, libraries, and instrumentation in Wayve codebases
• Serve as security point of contact for engineering teams and penetration-testing engagements
• Secure boot, OS, application, and data-offload layers across the fleet
• Work with hardware-backed security (HSMs, TrustZone, secure boot, signed updates, key management)
• Secure on-vehicle access and vehicle-to-backend communications
• Develop security architecture for internet-connected Linux-based embedded devices
• Engage in threat modelling, vulnerability management, code auditing, and policy implementation
• Balance security with reliability, performance, and developer velocity

• Proven record designing and delivering security systems for connected Linux-based embedded devices
• Hands-on experience with hardware-backed security in production systems
• Understanding of cryptography fundamentals and PKI
• System-level development experience with kernels, bootloaders, or embedded OS
• Proficiency in Python, C++, C, or Go with hands-on coding
• Clear technical communication to engineers, non-engineers, and leadership
• Nice-to-have: Yocto, QNX or RTOS, containers, secrets management, MISRA, vulnerability management, or security-community contributions

• Strong communication
• Cross-functional collaboration
• Problem solving
• Embedded Linux
• Real-time firmware security
• Hardware-backed security (HSMs, TrustZone)