Staff Embedded Security Engineer

Overview

As a Staff Embedded Security Engineer, you partner with embedded software teams to embed security into real-time firmware and Linux-based systems. You will identify risks, guide testing, and shape secure architectures across the vehicle stack. You’ll build tooling and contribute to security requirements, architecture, and test plans, ensuring robust protection from boot to cloud. This role sits at the intersection of vehicle security, reliability, and fleet-wide protection, offering meaningful impact on safe, scalable autonomy.

Pay / Benefits

• hybrid working model
• relocation support and visa sponsorship where applicable
• learning and development budgets for training and conferences
• comprehensive health and dental benefits
• retirement or pension where applicable
• equity and ownership in Wayve

Responsibilities

• Design and implement security controls in real-time embedded firmware and embedded Linux software
• Review code and designs to identify vulnerabilities and guide remediation
• Contribute to requirements, architecture docs, interface definitions, implementation guides, and test plans
• Collaborate with Security team to assess and address fleet-wide risks
• Build and maintain security tooling, libraries, controls, and instrumentation in Wayve codebases
• Serve as security point of contact for engineering teams and pen-testing engagements
• Secure boot, OS, application, and data-offload layers across development fleet
• Incorporate hardware-backed security into production systems (e.g., HSMs, TrustZone, secure boot, signed updates, key management)
• Design secure on-vehicle access and vehicle-to-backend communications
• Develop security architecture for internet-connected embedded devices and manage threat modelling, vulnerability management, and policy implementation

Key requirements

• Proven record designing and delivering security systems for connected Linux-based embedded devices
• Hands-on experience with hardware-backed security in production systems
• Understanding of cryptography fundamentals and PKI
• System-level development experience with kernels, bootloaders, or embedded OS
• Proficiency in Python, C/C++, or Go and hands-on coding
• Clear technical communication to engineers, non-engineers, and leadership
• Experience with Yocto, QNX or other RTOS, containers, secrets management, MISRA, vulnerability management or security-community contributions would be valuable

• Clear communication across technical and non-technical stakeholders
• Collaborative cross-functional teamwork
• Curiosity and bias for practical security improvements
• Security design for embedded Linux devices
• Hardware-backed security (HSMs, TrustZone, secure boot, key management)
• Cryptography fundamentals and PKI

…