(Principal) Senior Security Engineer

Ever imagined saying, “I helped launch the future of transportation”?

We’re rewriting the rules of urban mobility. At Vay, customers tap a button and a car arrives - with no one inside - powered by our world-first Remote Driving technology on real public streets.

We’re live in Las Vegas and scaling fast, powered by a strategic investment of up to $410 million from Grab . Our mission is simple: replace private car ownership with a faster, cleaner, door-to-door mobility model. If you want to build something real, visible, and genuinely transformative, you’ll feel right at home here.

Curious to experience Vay yourself? Use the code VAYCANDIDATE for $10 off your first trip in Las Vegas! Download the "Vay" app from the Apple or Google Play store & off you go!

What’s happening at Vay

• First to roll out vehicles in both Europe and the USA on public roads without a human being inside & currently the 2nd largest commercial, driverless car fleet in the Western World.
• We've partnered with Kodiak to bring remote-driving technology to autonomous trucks in the US, showcasing our ability to integrate our system into heavy-duty commercial vehicles and expand the applications of our tech across the US.
• We’ve completed 10’s of thousands of trips so far and are busy multiplying our Las Vegas fleet just to meet demand!
• ...And soon we’ll be expanding across the US & Europe

Why this role is exciting

Security at Vay is different. You’ll be working across a real-world technology platform combining vehicles, embedded systems, software, cloud infrastructure, connectivity and Remote Driving.

As a Senior / Principal Security Engineer , you’ll help shape the cybersecurity foundation of our technology platform, influencing architecture, engineering decisions and security practices across the company.

This role is ideal for someone who can operate strategically while staying technically hands-on. Depending on your experience and scope of ownership, the role can be hired at either Senior or Principal level.

What you'll be driving

• Own and evolve cybersecurity engineering practices across Vay’s Remote Driving platform and vehicle ecosystem.
• Perform threat modelling, security risk assessments and technical security analysis across products and systems.
• Define cybersecurity requirements and work with engineering teams to implement practical mitigations.
• Influence architecture and system design across Software, Systems, Embedded, Infrastructure, Safety and Validation teams.
• Build security into the full engineering lifecycle, from early design through implementation, testing and deployment.
• Shape security testing and validation strategies across Vay’s technology stack.
• Support secure approaches to authentication, authorization, communications, software updates, identity and trust.
• Assess vulnerabilities, prioritize real-world risk and drive effective remediation.
• Represent cybersecurity in technical reviews, architecture discussions and internal and external conversations.
• Build scalable security processes that can support the continued growth of Vay’s commercial fleet and technology platform.

This might be a great fit, if

• Around 8+ years of experience across cybersecurity engineering, product security, application security, platform security or related areas.
• Strong knowledge of security architecture, secure software development, threat modelling, vulnerability management and security risk assessment.
• Experience securing complex products involving multiple software, infrastructure, networking, hardware or device components.
• Experience translating security risks into clear technical requirements and practical mitigations.
• Good understanding of authentication, authorization, cryptography, secure communications and trust models.
• Experience working with security standards, regulatory frameworks or structured cybersecurity engineering processes.
• Strong technical depth and the ability to understand unfamiliar systems quickly.
• Excellent communication and stakeholder management skills across technical and non-technical audiences.
• Comfortable owning ambiguous problems and operating both strategically and hands-on.
• For Principal-level scope , significant experience driving security architecture, technical direction and cybersecurity topics across multiple engineering teams or an organization.

Nice to have

• Experience securing embedded systems, firmware, robotics, IoT, industrial technology, aerospace, medical devices, automotive systems or other cyber-physical systems.
• Automotive cybersecurity or vehicle systems security experience.
• Familiarity with ISO 21434, UNECE R155/R156, IEC 62443, the Cyber Resilience Act (CRA) or similar standards and regulations.
• Experience conducting TARA or comparable structured security risk assessments.
• Knowledge of embedded Linux, secure boot, secure software updates, hardware-backed security or device lifecycle security.

Why choose Vay

A global team of smart, motivated people from 30+ countries who love tackling hard problems and turning bold ideas into reality

Huge scope for impact in a fast paced environment

ESOP stock options: A stake in Vay’s future - not just a salary

Unlimited Paid Vacation Days

Subsidised Deutschland ticket (Berlin)

️‍♂️ Subsidised Urban Sports Club or FitX Membership 

All Vay team members receive 30% off their Vay rides

️ Exclusive external discounts

€350 Home Office Set-up 

✈️ Relocation financial assistance when relocating to Berlin 

Fully funded German Lessons 

Regular team events throughout the year

For more information on Vay’s physical demands, working environments and safety requirements, you can review this link . We’ll also cover anything specific to this role during the first interview.

We’d love to stay connected for future opportunities, so feel free to include your LinkedIn profile when you apply.

We welcome applications from all backgrounds and experiences. If you’re excited about shaping something truly groundbreaking, we’d be happy to hear from you.