security engineer

Vay
Berlin, Germany
5 days ago
Apply on startup.jobs
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Working hours
Regular working hours
Job source

Tech stack

Cyber Security Computer Networks Linux on Embedded Systems Firmware Cyber-physical Systems Software Engineering Software Vulnerability Management Cloud Platform System Software Security U-Boot

Requirements

As a Senior Security Engineer, you will play a critical role in shaping the cybersecurity foundation of Vay’s technology platform and remote driving ecosystem. This is a highly cross-functional role that sits at the intersection of product security, systems engineering, software development, and organizational leadership.

You’ll work cross-functionally to ensure our products and systems are designed, developed, and validated with security at the core. Your work will directly influence how we assess risk, define mitigations, validate security requirements, and scale secure engineering practices across the company.

This role is ideal for someone who can operate both strategically and hands-on. You should be comfortable driving high-level security architecture and process discussions while also diving deep into technical details when needed. Strong communication and stakeholder management skills are essential, as you’ll often act as the security voice across the organization.

The role can be scoped at a Senior looking for a step up or Principal level depending on your experience, technical depth, and ability to drive security topics across the organization., You are an experienced security engineer who has worked closely with engineering teams to influence secure product and system design across the development lifecycle:

  • Around 8+ years of experience in cybersecurity engineering, product security, application security, platform security, or related areas
  • Strong understanding of security architecture, secure software development, threat modelling, vulnerability management, and security risk assessment
  • Experience working with complex products or systems involving multiple software, infrastructure, hardware, or networking components
  • Ability to assess security vulnerabilities, prioritize risks, and define practical mitigations
  • Experience defining security requirements and working with engineering teams to implement them
  • Good understanding of authentication, authorization, cryptographic concepts, secure communication, and trust models
  • Familiarity with security standards, regulatory frameworks, or structured security processes
  • Strong technical depth and the ability to understand unfamiliar systems quickly
  • Excellent communication, planning, and stakeholder management skills
  • Comfortable operating both strategically and hands-on in fast-moving engineering environments, * Experience securing embedded systems, firmware, robotics, IoT, industrial technology, aerospace, medical devices, automotive systems or other cyber-physical systems.
  • Automotive cybersecurity or vehicle systems security experience.
  • Familiarity with ISO 21434, UNECE R155/R156, IEC 62443, the Cyber Resilience Act (CRA) or similar standards and regulations.
  • Experience conducting TARA or comparable structured security risk assessments.
  • Knowledge of embedded Linux, secure boot, secure software updates, hardware-backed security or device lifecycle security.

About the company

What’s happening at Vay

  • First to roll out vehicles in both Europe and the USA on public roads without a human being inside & currently the 2nd largest commercial, driverless car fleet in the Western World.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on startup.jobs
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

4:00 min

Customizing keyboards with mechanical switches and custom firmware

Andreas Taranetz Andreas Taranetz · Europe 2026 Virtual

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

2:20 min

Utilizing custom firmware for variable torque manipulation

Daniel Meilak Daniel Meilak +1 · World Congress 2026 Europe

Videos

See all

Related articles

See all