About the Role
Before the detail, here's the challenge you'd help us solve. We build the embodied intelligence that moves real vehicles safely, and the ecosystem a billion machines will run on in the future. Very few people in AI can say this. Every role here, whatever the team, plugs into that.
We're seeking an exceptional Cyber Security Engineer to join our Germany-based team, focused on localising and advancing Wayve's autonomous driving technology for the German market. This is a unique opportunity to play a hands-on role in shaping our AV capabilities in Germany from the ground up.
As part of our mission to scale end-to-end embodied AI for autonomous driving, we are building a fully automotive compliant ML software product. As an integral part of production compliance and supporting customers in complying with ISO/SAE 21434, we are looking for an experienced system-minded cybersecurity engineer to lead the security threat analysis and risk assessment of on-board software development process and its in-vehicle integration, derive a cybersecurity concept and plan, and continuously support our SW development cycle from the cybersecurity standpoint. This role will be critical in defining what level and mitigation policies the company must follow as part of DevOp operation and which security assumptions are translated to OEM and Tier 1 responsibilities as part of the in-vehicle architecture, in order to deploy our embodied AI models in compliance with cybersecurity goals.
Responsibilities
TARA Assessment of core onboard SW
•Define system assets, define preliminary security level architecture
•Lead TARA assessment per architecture definition
•Derive external and internal vulnerabilities and control mitigations
Cybersecurity Concept and Plan
•Formulate a cybersecurity concept and plan that supports OEM cybersecurity compliance
•Enlist both onboard and development SW and third-party library entry points and risks and mitigation plans
•Lead SW DevOp security requirements and validation
•Lead specifications for SW DevOp nightly regression flow with respect to security screening
•Lead design reviews, define a method and a flow for security improvements, vulnerability and pentests
OEM and Tier 1 cybersecurity collaboration
•Engage with OEMs and Tier 1s to align on external requirements/assumptions based on formulated cybersecurity concept
•Penetration testing alignment: collaborating live with security consultants or red teams
•Joint physical reviews of hardware trust boundaries, key provisioning, secure boot integration, etc.
Requirements
•5+ years experience in cybersecurity systems engineering
•Proven experience orchestrating company's cybersecurity DevOp policies, running report investigations and ability to drive SW improvements with respect to cybersecurity
•Ability to apply TARA (Threat Analysis and Risk Assessment), experience with STRIDE, HEAVENS 2.0, attack trees, or similar frameworks
•Understanding of ISO/SAE 21434 and mapping threats to cybersecurity goals
•Skill in assessing impact × feasibility, and converting results into mitigations
•Familiarity with Secure Boot, TPM, HSMs, and key provisioning
•Understanding of vehicle trust boundaries, secure diagnostics, and network segmentation
•Hands-on experience in: Fuzzing, static analysis, reverse engineering
•Familiarity with CVEs and common vulnerability classes in C/C++/Python codebases
•Using tools like: Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL, etc.
•Secure Software Engineering; Systems Integration & Testing
•Comfort working with CI/CD pipelines to enforce security gates
•Ability to work cross-functionally and translate domain analysis into technical and product requirements
•Experience working in an agile, fast-scaling environment with a strong execution mindset
•Familiarity with automotive systems cybersecurity, knowledge of ECU architecture and protocols
Not ticking every box? That's totally okay! If you're passionate about autonomy and keen to learn, you're encouraged to apply even if you don't meet every requirement.
About Wayve
Wayve is building the leading AI platform for autonomous driving, pioneering an end-to-end AI approach that enables vehicles to learn directly from real-world experience, developing the ability to adapt, generalise and improve at scale. Instead of relying on hand-coded rules or pre-mapped environments, the AI Driver learns to drive by understanding the world around it. Wayve's mapless and hardware-agnostic AI platform integrates with global OEM partners, enabling continuous software evolution and unlocking advanced levels of automation from L2+ through to L4 as the core AI model scales.
Locations & Flexible Working
Main hubs are in London, Sunnyvale, Yokohama, Herzliya, Vancouver and Leonberg. Wayve operates a hybrid working model that combines in-person collaboration in dedicated office spaces with focused time working remotely.
The Interview Process
•Initial call / recruiter screen (30 mins)
•Competency Interviews [Domain Knowledge, 60 mins]
•Deep-dive technical interviews: Security Strategy Presentation (60 mins), Cross Functional SW Architecture (60 mins), Platform (60 mins)
•Final interview: Mission & Values alignment (30 mins)
Benefits
•💰 Salaries benchmarked against the market annually
•📈 Meaningful equity, sharing in the ownership and long-term success of Wayve
•✈️ Relocation support and visa sponsorship where applicable
•✅ Hybrid working, core hours and the chance to work hands-on in vehicle workshops and labs
•📚 Learning and development budgets with support for training, conferences and growth
•🩺 Comprehensive benefits including health insurance, dental, enhanced maternity and paternity leave, retirement or pension where applicable, access to therapists, wellbeing partnerships, team socials and more
A quick, honest note before you apply: Wayve is not a mature, fully-structured place with the playbook already written. Much of how we work is still being written, and if you join, you'll help write it. That suits people who want real ownership more than people who need a settled structure from day one.
