Senior Product Security Engineer (Embedded / Automotive)

Ever imagined saying, “I helped launch the future of transportation”?

We’re rewriting the rules of urban mobility. At Vay, customers tap a button and a car arrives — with no one inside — powered by our world-first Remote Driving technology on real public streets.

We’re live in Las Vegas and scaling fast, powered by a strategic investment of up to $410 million from Grab. Our mission is simple: replace private car ownership with a faster, cleaner, door-to-door mobility model.

If you want to build something real, visible, and genuinely transformative, you’ll feel right at home here.

Curious to experience Vay yourself? Use the code VAYCANDIDATE for $10 off your first trip in Las Vegas! Download the “Vay” app from the Apple App Store or Google Play and off you go!

What’s Happening at Vay

• We were the first to roll out vehicles in both Europe and the USA on public roads without a human being inside and currently operate the 2nd largest commercial, driverless car fleet in the Western world.
• We’ve partnered with Kodiak to bring remote-driving technology to autonomous trucks in the US, showcasing our ability to integrate our system into heavy-duty commercial vehicles and expand the applications of our technology across the US.
• We’ve completed tens of thousands of trips so far and are busy multiplying our Las Vegas fleet to meet growing demand.
• And soon, we’ll be expanding across the US and Europe 🚀

Why This Role Is Exciting

As a Senior Security Engineer, you will play a critical role in shaping the cybersecurity foundation of Vay’s technology platform and remote-driving ecosystem.

This is a highly cross-functional role that sits at the intersection of product security, systems engineering, software development, and organizational leadership.

You’ll work cross-functionally to ensure our products and systems are designed, developed, and validated with security at the core. Your work will directly influence how we:

• Assess risk
• Define security mitigations
• Validate security requirements
• Scale secure engineering practices across the company

This role is ideal for someone who can operate both strategically and hands-on. You should be comfortable driving high-level security architecture and process discussions while also diving deep into technical details when needed.

Strong communication and stakeholder management skills are essential, as you’ll often act as the security voice across the organization.

The role can be scoped at Senior level for someone looking for a step up, or at Principal level, depending on your experience, technical depth, and ability to drive security topics across the organization.

This Might Be a Great Fit If

You are an experienced security engineer who has worked closely with engineering teams to influence secure product and system design across the development lifecycle.

• Around 8+ years of experience in cybersecurity engineering, product security, application security, platform security, or related areas
• Strong understanding of security architecture, secure software development, threat modeling, vulnerability management, and security risk assessment
• Experience working with complex products or systems involving multiple software, infrastructure, hardware, or networking components
• Ability to assess security vulnerabilities, prioritize risks, and define practical mitigations
• Experience defining security requirements and working with engineering teams to implement them
• Good understanding of authentication, authorization, cryptographic concepts, secure communication, and trust models
• Familiarity with security standards, regulatory frameworks, or structured security processes
• Strong technical depth and the ability to understand unfamiliar systems quickly
• Excellent communication, planning, and stakeholder management skills
• Comfortable operating both strategically and hands-on in fast-moving engineering environments

Nice to Have

• Experience securing embedded systems, firmware, robotics, IoT, industrial technology, aerospace, medical devices, automotive systems, or other cyber-physical systems
• Automotive cybersecurity or vehicle systems security experience
• Familiarity with ISO 21434, UNECE R155/R156, IEC 62443, the Cyber Resilience Act (CRA), or similar standards and regulations
• Experience conducting TARA or comparable structured security risk assessments
• Knowledge of embedded Linux, secure boot, secure software updates, hardware-backed security, or device lifecycle security

Why Choose Vay?

• 💪 A global team of smart, motivated people from 30+ countries who love tackling hard problems and turning bold ideas into reality
• 🌍 Huge scope for impact in a fast-paced environment
• 💰 EIP stock options — a stake in Vay’s future, not just a salary
• 🌴 Unlimited paid vacation days
• 🎫 Subsidized Deutschlandticket (Berlin)
• 🏋️‍♂️ Subsidized Urban Sports Club or FitX membership
• 🚗 30% off Vay rides for all Vay team members
• 🛍️ Exclusive external discounts
• 💼 €350 home office setup allowance
• ✈️ Relocation financial assistance when relocating to Berlin
• 📚 Fully funded German lessons
• 🎊 Regular team events throughout the year

Additional Information

For more information on Vay’s physical demands, working environments, and safety requirements, you can review the relevant information provided with the application. We’ll also cover anything specific to this role during the first interview.

We’d love to stay connected for future opportunities, so feel free to include your LinkedIn profile when you apply.

We welcome applications from all backgrounds and experiences. If you’re excited about shaping something truly groundbreaking, we’d be happy to hear from you.