Cyber Security Engineer

Before the detail, here's the challenge you'd help us solve. We build the embodied intelligence that moves real vehicles safely, and the ecosystem a billion machines will run on in the future. Very few people in AI can say this. Every role here, whatever the team, plugs into that. Here’s what this particular role covers. 🛠️ About our team We’re seeking an exceptional Cyber Security Engineer to join our Germany-based team, focused on localising and advancing Wayve’s autonomous driving technology for the German market. This is a unique opportunity to play a hands-on role in shaping our AV capabilities in Germany from the ground up.   🧠 Your day-to-day • TARA Assessment of core onboard SW • Define system assets , define preliminary security level architecture • Lead TARA assessment per architecture definition • Derive external and internal vulnerabilities and control mitigations • Cybersecurity Concept and Plan • Formulate a cybersecurity concept and plan that supports OEM cybersecurity compliance. • Enlist both onboard and development SW and third party library entry points and risks and mitigation plans. • Lead SW DevOp security requirements and validation • Lead specifications for SW DevOp nightly regression flow with respect to security screening • Lead design reviews, define a method and a flow for security improvements, vulnerability and pentests. • OEM and Tier 1 cybersecurity collaboration • Engage with OEMs and Tier 1s to align on external requirements/assumptions based on formulated cybersecurity concept. • Penetration testing alignment: Collaborating live with security consultants or red teams • Joint physical reviews of hardware trust boundaries, key provisioning, secure boot integration, etc.   🧩 What you’ll be working on As part of our mission to scale end-to-end embodied AI for autonomous driving, we are building a fully automotive compliant ML software product. As an integral part of production compliance and being active in supporting customers complying ISO/SAE 21434, we are looking for an experienced system-minded cybersecurity engineer to lead the security threat analysis and risk assessment of on-board software development process and its in vehicle integration, derive cybersecurity concept and plan and continuously support our SW development cycle from the cybersecurity standpoint. This role will be critical in defining what level and mitigation policies the company must follow as part of DevOp operation and which security assumptions are translated to OEM and Tier 1 responsibilities as part of the in-vehicle architecture, in order to deploy our embodied AI models in compliance with cybersecurity goals.     🙌 You should apply if Essential • 5+ years experience in cybersecurity systems engineering. • Proven experience orchestrating company’s cybersecurity DevOp policies, running report investigations and ability to drive SW improvements with respect to cybersecurity. • Ability to apply TARA (Threat Analysis and Risk Assessment), experience with STRIDE, HEAVENS 2.0, attack trees, or similar frameworks • Understanding of ISO/SAE 21434 and mapping threats to cybersecurity goals • Skill in assessing impact × feasibility, and converting results into mitigations • Familiarity with Secure Boot, TPM, HSMs, and key provisioning • Understanding of vehicle trust boundaries, secure diagnostics, and network segmentation • Hands-on experience in: • Fuzzing, static analysis, reverse engineering • Familiarity with CVEs and common vulnerability classes in C/C++/Python codebases • Using tools like: Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL, etc. • Secure Software Engineering • Systems Integration & Testing • Comfort working with CI/CD pipelines to enforce security gates • Abilit