Cyber Security Engineer at Wayve
Germany
Posted
on-site · full_time · Visa sponsorship
Responsibilities:
- Lead Threat Analysis and Risk Assessment (TARA) for core onboard software and in-vehicle integration.
- Define system assets, preliminary security-level architecture, and security assumptions across vehicle trust boundaries.
- Derive internal/external vulnerabilities and specify mitigations and control objectives.
- Create and maintain a cybersecurity concept and plan aligned with OEM and ISO/SAE 21434 requirements.
- Specify SW DevOps security requirements and validation (CI/CD security gates, nightly regression screening).
- Own design reviews, vulnerability management flow, and penetration-testing coordination (internal and with consultants/red teams).
- Collaborate with OEMs and Tier 1 suppliers on integration topics: secure boot, key provisioning, TPM/HSM, and hardware trust boundaries.
- Support SW development lifecycle with security improvements, tests, and validation activities.
Requirements:
- 5+ years in cybersecurity systems engineering with hands-on experience in automotive or embedded environments.
- Proven experience running company-level DevOps/security policies, security reporting, and driving SW remediation.
- Practical expertise applying TARA, STRIDE, HEAVENS 2.0, or similar threat-modelling frameworks.
- Knowledge of ISO/SAE 21434, secure boot, TPM/HSM, key provisioning, and hardware/software trust boundaries.
- Familiarity with static analysis, fuzzing, reverse engineering, and penetration testing workflows.
- Experience defining security requirements for CI/CD pipelines and validating security gates.
- Strong communication skills for cross-team and OEM/Tier 1 collaboration.