SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Wayve is building an AI platform for autonomous driving, pioneering an end-to-end AI approach that enables vehicles to learn from real-world experience. The company is establishing a Germany-based team to localize and advance autonomous driving technology for the German market.
In this role, you will lead cybersecurity strategy and implementation for Wayve's onboard software and vehicle integration. Your responsibilities include:
**Threat Analysis & Risk Assessment (TARA):** Define system assets and preliminary security-level architecture. Lead TARA assessments per architecture definition and derive external and internal vulnerabilities with control mitigations.
**Cybersecurity Concept & Planning:** Formulate comprehensive cybersecurity concepts and plans supporting OEM compliance. Identify onboard and development software entry points, third-party library risks, and mitigation strategies.
**DevOps Security Leadership:** Lead specifications for software DevOps nightly regression flows with security screening. Define design review methods, security improvement processes, vulnerability assessments, and penetration testing protocols.
**OEM & Tier 1 Collaboration:** Engage with OEMs and Tier 1 suppliers to align on external requirements based on your cybersecurity concept. Collaborate with security consultants and red teams on penetration testing. Conduct joint physical reviews of hardware trust boundaries, key provisioning, and secure boot integration.
You will be instrumental in defining security levels, mitigation policies, and DevOps operations while translating security assumptions to OEM and Tier 1 responsibilities for in-vehicle architecture deployment in compliance with ISO/SAE 21434.
Wayve operates a hybrid model with main hubs in London, Sunnyvale, Yokohama, Herzliya, Vancouver, and Leonberg, combining in-person collaboration with remote flexibility.
**Requirements:**
Essential:
- 5+ years experience in cybersecurity systems engineering
- Proven experience orchestrating company cybersecurity DevOps policies, running investigations, and driving software improvements
- Ability to apply TARA; experience with STRIDE, HEAVENS 2.0, attack trees, or similar frameworks
- Understanding of ISO/SAE 21434 and mapping threats to cybersecurity goals
- Skill in assessing impact × feasibility and converting results into mitigations
- Familiarity with Secure Boot, TPM, HSMs, and key provisioning
- Understanding of vehicle trust boundaries, secure diagnostics, and network segmentation
- Hands-on experience in fuzzing, static analysis, reverse engineering
- Familiarity with CVEs and common vulnerability classes in C/C++/Python codebases
- Experience with tools: Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL
- Background in Secure Software Engineering and Systems Integration & Testing
- Comfort working with CI/CD pipelines to enforce security gates
- Ability to work cross-functionally and translate domain analysis into technical and product requirements
- Experience in agile, fast-scaling environments with strong execution mindset
Desirable:
- Familiarity with automotive systems cybersecurity and ECU architecture/protocols
