Senior Product Security Engineer (Embedded / Automotive)

This role is ideal for someone who can operate both strategically and hands-on. You should be comfortable driving high-level security architecture and process discussions while also diving deep into technical details when needed. Strong communication and stakeholder management skills are essential, as you’ll often act as the security voice across the organization.

The role can be scoped at a Senior looking for a step up or Principal level depending on your experience, technical depth, and ability to drive security topics across the organization.

This might be a great fit, if

You are an experienced security engineer who has worked closely with engineering teams to influence secure product and system design across the development lifecycle:

• Around 8+ years of experience in cybersecurity engineering, product security, application security, platform security, or related areas
• Strong understanding of security architecture, secure software development, threat modelling, vulnerability management, and security risk assessment
• Experience working with complex products or systems involving multiple software, infrastructure, hardware, or networking components
• Ability to assess security vulnerabilities, prioritize risks, and define practical mitigations
• Experience defining security requirements and working with engineering teams to implement them
• Good understanding of authentication, authorization, cryptographic concepts, secure communication, and trust models
• Familiarity with security standards, regulatory frameworks, or structured security processes
• Strong technical depth and the ability to understand unfamiliar systems quickly
• Excellent communication, planning, and stakeholder management skills
• Comfortable operating both strategically and hands-on in fast-moving engineering environments

Nice to have

• Experience securing embedded systems, firmware, robotics, IoT, industrial technology, aerospace, medical devices, automotive systems or other cyber-physical systems.
• Automotive cybersecurity or vehicle systems security experience.
• Familiarity with ISO 21434, UNECE R155/R156, IEC 62443, the Cyber Resilience Act (CRA) or similar standards and regulations.
• Experience conducting TARA or comparable structured security risk assessments.
• Knowledge of embedded Linux, secure boot, secure software updates, hardware-backed security or device lifecycle security.

Why choose Vay

• A global team of smart, motivated people from 30+ countries who love tackling hard problems and turning bold ideas into reality
• Huge scope for impact in a fast paced environment
• EIP stock options: A stake in Vay’s future – not just a salary
• Unlimited Paid Vacation Days
• Subsidised Deutschland ticket (Berlin)
• Subsidised Urban Sports Club or FitX Membership
• All Vay team members receive 30% off their Vay rides
• Exclusive external discounts
• €350 Home Office Set-up
• Relocation financial assistance when relocating to Berlin
• Fully funded German Lessons
• Regular team events throughout the year

For more information on Vay’s physical demands, working environments and safety requirements, you can review this link. We’ll also cover anything specific to this role during the first interview.

We’d love to stay connected for future opportunities, so feel free to include your LinkedIn profile when you apply.

We welcome applications from all backgrounds and experiences. If you’re excited about shaping something truly groundbreaking, we’d be happy to hear from you.

What to expect

We’re building technology that moves the world forward—and we do it together. Here’s what you can expect as part of our mission-driven team.

• Flexible working options
• Transparent hiring process
• Collaborative team culture
• Mission-driven work with real-world applications