Senior Product Security Engineer (Embedded / Automotive)

Ever imagined saying, “I helped launch the future of transportation”?

We’re rewriting the rules of urban mobility. At Vay, customers tap a button and a car arrives - with no one inside - powered by our world-first Remote Driving technology on real public streets.

We’re live in Las Vegas and scaling fast, powered by a strategic investment of up to $410 million from Grab . Our mission is simple: replace private car ownership with a faster, cleaner, door-to-door mobility model. If you want to build something real, visible, and genuinely transformative, you’ll feel right at home here.

Curious to experience Vay yourself? Use the code VAYCANDIDATE for $10 off your first trip in Las Vegas! Download the "Vay" app from the Apple or Google Play store & off you go!

What’s happening at Vay

• First to roll out vehicles in both Europe and the USA on public roads without a human being inside & currently the 2nd largest commercial, driverless car fleet in the Western World.
• We've partnered with Kodiak to bring remote-driving technology to autonomous trucks in the US, showcasing our ability to integrate our system into heavy-duty commercial vehicles and expand the applications of our tech across the US.
• We’ve completed 10’s of thousands of trips so far and are busy multiplying our Las Vegas fleet just to meet demand!
• ...And soon we’ll be expanding across the US & Europe

Why this role is exciting

As a Senior Security Engineer , you will play a critical role in shaping the cybersecurity foundation of Vay’s technology platform and remote driving ecosystem. This is a highly cross-functional role that sits at the intersection of product security, systems engineering, software development, and organizational leadership.

You’ll work cross-functionally to ensure our products and systems are designed, developed, and validated with security at the core. Your work will directly influence how we assess risk, define mitigations, validate security requirements, and scale secure engineering practices across the company.

This role is ideal for someone who can operate both strategically and hands-on. You should be comfortable driving high-level security architecture and process discussions while also diving deep into technical details when needed. Strong communication and stakeholder management skills are essential, as you’ll often act as the security voice across the organization.

The role can be scoped at a Senior looking for a step up or Principal level depending on your experience, technical depth, and ability to drive security topics across the organization.

This might be a great fit, if

You are an experienced security engineer who has worked closely with engineering teams to influence secure product and system design across the development lifecycle:

• Around 8+ years of experience in cybersecurity engineering, product security, application security, platform security, or related areas
• Strong understanding of security architecture, secure software development, threat modelling, vulnerability management, and security risk assessment
• Experience working with complex products or systems involving multiple software, infrastructure, hardware, or networking components
• Ability to assess security vulnerabilities, prioritize risks, and define practical mitigations
• Experience defining security requirements and working with engineering teams to implement them
• Good understanding of authentication, authorization, cryptographic concepts, secure communication, and trust models
• Familiarity with security standards, regulatory frameworks, or structured security processes
• Strong technical depth and the ability to understand unfamiliar systems quickly
• Excellent communication, planning, and stakeholder management skills
• Comfortable operating both strategically and hands-on in fast-moving engineering environments

Nice to have

• Experience securing embedded systems, firmware, robotics, IoT, industrial technology, aerospace, medical devices, automotive systems or other cyber-physical systems.
• Automotive cybersecurity or vehicle systems security experience.
• Familiarity with ISO 21434, UNECE R155/R156, IEC 62443, the Cyber Resilience Act (CRA) or similar standards and regulations.
• Experience conducting TARA or comparable structured security risk assessments.
• Knowledge of embedded Linux, secure boot, secure software updates, hardware-backed security or device lifecycle security.

Why choose Vay

A global team of smart, motivated people from 30+ countries who love tackling hard problems and turning bold ideas into reality

Huge scope for impact in a fast paced environment

EIP stock options: A stake in Vay’s future - not just a salary

Unlimited Paid Vacation Days

Subsidised Deutschland ticket (Berlin)

‍ Subsidised Urban Sports Club or FitX Membership

All Vay team members receive 30% off their Vay rides

Exclusive external discounts

€350 Home Office Set-up

…