Senior Product Security Engineer (Embedded / Automotive) at Vay
Germany
Posted
on-site · full-time · Visa sponsorship
Responsibilities:
- Define and lead product security architecture for embedded and automotive systems across the development lifecycle.
- Perform threat modelling, risk assessments (TARA), and vulnerability management for firmware, embedded Linux and cloud-connected components.
- Translate regulatory and standards requirements (ISO 21434, UNECE R155/R156, IEC 62443) into technical controls and validation plans.
- Work cross-functionally with product, firmware, hardware and platform teams to embed security requirements and secure-by-design practices.
- Drive incident response, security reviews, security testing, and continuous improvement of secure engineering processes.
- Mentor engineers, influence roadmaps, and present security trade-offs to stakeholders.
Requirements:
- ~8+ years experience in cybersecurity/product security with strong hands-on knowledge of embedded or automotive systems.
- Demonstrable experience with threat modelling, TARA, vulnerability triage and secure firmware/boot design (secure boot, hardware-backed keys).
- Familiarity with automotive safety & security standards (ISO 21434, UNECE R155/R156) and secure development practices.
- Strong systems thinking, excellent communication skills, and ability to operate strategically and hands-on.
- Experience with cryptography basics, secure update mechanisms, and collaboration with cross-functional engineering teams.