Principal Security Engineer

Ever imagined saying, "I helped launch the future of transportation"?

We're rewriting the rules of urban mobility. At Vay, customers tap a button and a car arrives - with no one inside - powered by our world-first Remote Driving technology on real public streets.

We're live in Las Vegas and scaling fast, powered by a strategic investment of up to $410 million from Grab. Our mission is simple: replace private car ownership with a faster, cleaner, door-to-door mobility model. If you want to build something real, visible, and genuinely transformative, you'll feel right at home here.

Curious to experience Vay yourself? Use the code VAYCANDIDATE for $10 off your first trip in Las Vegas! Download the "Vay" app from the Apple or Google Play store & off you go!

What's happening at Vay

First to roll out vehicles in both Europe and the USA on public roads without a human being inside & currently the 2nd largest commercial, driverless car fleet in the Western World.

We've partnered with Kodiak to bring remote-driving technology to autonomous trucks in the US, showcasing our ability to integrate our system into heavy-duty commercial vehicles and the applications of our tech across the US.

We've completed 10's of thousands of trips so far and are busy multiplying our Las Vegas fleet just to meet demand!

...And soon we'll be expanding across the US & Europe 🚀

Why this role is exciting

As a Principal Security Engineer, you will play a critical role in shaping the cybersecurity foundation of Vay's vehicle and remote driving ecosystem. This is a highly cross-functional role that sits at the intersection of automotive security, embedded systems, safety-critical development, and organizational leadership.

You'll work closely cross-functionally to ensure our products are designed, developed, and validated with security at the core. Your work will directly influence how we assess risk, define mitigations, validate security requirements, and scale secure engineering practices across the company.

This role is ideal for someone who can operate both strategically and hands-on. You should be comfortable driving high-level security architecture and process discussions while also diving deep into technical details when needed. Strong communication and stakeholder management skills are essential, as you'll often act as the security voice across the organization.

What you'll be driving

You will lead and evolve the cybersecurity engineering practices that support Vay's remote driving technology and vehicle platforms. In order to do that, you will:

Develop, define, and maintain cybersecurity processes aligned with ISO 21434 and other relevant standards and frameworks such as ISO 27001 and UNECE R155/R156

Perform security risk assessments and maintain the Threat Analysis and Risk Assessment (TARA) work products

Define cybersecurity requirements and collaborate with cross-functional engineering teams to implement effective mitigations

Partner with Safety, Systems, Embedded, and Validation teams to ensure secure product development throughout the lifecycle

Drive security architecture discussions and influence system-level design decisions across multiple domains

Create and evolve security testing and validation strategies for vehicle and remote driving systems

Support secure OTA update mechanisms and secure communication architectures

Represent cybersecurity topics in internal and external technical discussions and reviews

Help build scalable security processes that support the growth of Vay's commercial fleet and technology platform

This might be a great fit, if

You are an experienced security engineer who enjoys working across organizational boundaries, influencing complex technical systems, and building products that operate safely in the real world.

8+ years of experience in cybersecurity engineering

2+ years of experience working on automotive, robotics, IoT, or other embedded/safety-critical products

Strong understanding of automotive cybersecurity principles, automotive networks, and OTA update mechanisms

Experience performing security risk assessments and maintaining TARA work products

Familiarity with ISO 21434, UNECE WP.29 R155/R156, and related automotive cybersecurity standards

Understanding of embedded systems development and secure software development practices

Knowledge of cryptographic concepts and secure communication principles

Ability to assess security vulnerabilities, prioritize risks, and define practical mitigations

Excellent communication, planning, and stakeholder management skills

Comfortable operating both strategically and hands-on in fast-moving engineering environments

Why choose Vay

💪 A global team of smart, motivated people from 30+ countries who love tackling hard problems and turning bold ideas into reality

🌍 Huge scope for impact in a fast paced environment

💰 ESOP stock options: A stake in Vay's future - not just a salary

🌴 Unlimited Paid Vacation Days

🎫 Subsidised Deutschland ticket (Berlin)

🏋️♂️ Subsidised Urban Sports Club or FitX Membership

🚗 All Vay team members receive 30% off their Vay rides

🛍️ Exclusive external discounts

💼 €350 Home Office Set-up

✈️ Relocation financial assistance when relocating to Berlin

📚 Fully funded German Lessons

🎊 Regular team events throughout the year

For more information on Vay's physical demands, working environments and safety requirements, you can review this link. We'll also cover anything specific to this role during the first interview.

We'd love to stay connected for future opportunities, so feel free to include your LinkedIn profile when you apply.

We welcome applications from all backgrounds and experiences. If you're excited about shaping something truly groundbreaking, we'd be happy to hear from you.