> Markdown version of [/jobs/ext/4681410-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/4681410-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Engineer

- **Company:** Wayve
- **Location:** Germany (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, C++ (Programming Language), Static Program Analysis, Cyber Security, Fuzz Testing, Python (Programming Language), Network Segmentation, Reverse Engineering, Software Engineering, Systems Integration, Wireshark, Software Security, Metasploit, U-Boot
- **Published:** November 12, 2026
- **Apply:** https://www.adzuna.de/details/5961896522

## About the Role

* 5+ years experience in cybersecurity systems engineering.
 * Proven experience orchestrating company's cybersecurity DevOp policies, running report investigations and ability to drive SW improvements with respect to cybersecurity.
 * Ability to apply TARA (Threat Analysis and Risk Assessment), experience with STRIDE, HEAVENS 2.0, attack trees, or similar frameworks
 * Understanding of ISO/SAE 21434 and mapping threats to cybersecurity goals
 * Skill in assessing impact × feasibility, and converting results into mitigations
 * Familiarity with Secure Boot, TPM, HSMs, and key provisioning
 * Understanding of vehicle trust boundaries, secure diagnostics, and network segmentation
 * Hands-on experience in:
 + Fuzzing, static analysis, reverse engineering
 + Familiarity with CVEs and common vulnerability classes in C/C++/Python codebases
 + Using tools like: Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL, etc.
 + Secure Software Engineering
 + Systems Integration & Testing
 + Comfort working with CI/CD pipelines to enforce security gates
 * Ability to work cross-functionally and translate domain analysis into technical and product requirements.
 * Experience working in an agile, fast-scaling environment with a strong execution mindset.

Desirable:

Familiarity with automotive systems cybersecurity, knowledge of ECU architecture and protocols.

Not ticking every box? That's totally okay! If you're passionate about autonomy and keen to learn, we encourage you to apply even if you don't meet every requirement.

## Description

We're seeking an exceptional Cyber Security Engineer to join our Germany-based team, focused on localising and advancing Wayve's autonomous driving technology for the German market. This is a unique opportunity to play a hands-on role in shaping our AV capabilities in Germany from the ground up.

Your day-to-day

 * TARA Assessment of core onboard SW
 + Define system assets , define preliminary security level architecture
 + Lead TARA assessment per architecture definition
 + Derive external and internal vulnerabilities and control mitigations
 * Cybersecurity Concept and Plan
 + Formulate a cybersecurity concept and plan that supports OEM cybersecurity compliance.
 + Enlist both onboard and development SW and third party library entry points and risks and mitigation plans.
 * Lead SW DevOp security requirements and validation
 + Lead specifications for SW DevOp nightly regression flow with respect to security screening
 + Lead design reviews, define a method and a flow for security improvements, vulnerability and pentests.
 * OEM and Tier 1 cybersecurity collaboration
 + Engage with OEMs and Tier 1s to align on external requirements/assumptions based on formulated cybersecurity concept.
 + Penetration testing alignment: Collaborating live with security consultants or red teams
 + Joint physical reviews of hardware trust boundaries, key provisioning, secure boot integration, etc.

What you'll be working on

As part of our mission to scale end-to-end embodied AI for autonomous driving, we are building a fully automotive compliant ML software product. As an integral part of production compliance and being active in supporting customers complying ISO/SAE 21434, we are looking for an experienced system-minded cybersecurity engineer to lead the security threat analysis and risk assessment of on-board software development process and its in vehicle integration, derive cybersecurity concept and plan and continuously support our SW development cycle from the cybersecurity standpoint.

This role will be critical in defining what level and mitigation policies the company must follow as part of DevOp operation and which security assumptions are translated to OEM and Tier 1 responsibilities as part of the in-vehicle architecture, in order to deploy our embodied AI models in compliance with cybersecurity goals.