Principal Security Engineer

Ever imagined saying, “I helped launch the future of transportation”?

We’re rewriting the rules of urban mobility.

At Vay, customers tap a button and a car arrives - with no one inside - powered by our world-first Remote Driving technology on real public streets.

We’re live in Las Vegas and scaling fast, powered by a strategic investment of up to $410 million from Grab.

Our mission is simple: replace private car ownership with a faster, cleaner, door-to-door mobility model.

If you want to build something real, visible, and genuinely transformative, you’ll feel right at home here.

• What’s happening at Vay
• First to roll out vehicles in both Europe and the USA on public roads without a human being inside and currently the 2nd largest commercial, driverless car fleet in the Western World.
• We’ve partnered with Kodiak to bring remote‑driving technology to autonomous trucks in the US, showcasing our ability to integrate our system into heavy‑duty commercial vehicles and expand the applications of our tech across the US.
• We’ve completed tens of thousands of trips so far and are busy multiplying our Las Vegas fleet just to meet demand.
• We will be expanding across the US & Europe.
• Why this role is exciting
• As a

Principal Security Engineer , you will play a critical role in shaping the cybersecurity foundation of Vay’s vehicle and remote driving ecosystem.

This is a highly cross‑functional role that sits at the intersection of automotive security, embedded systems, safety‑critical development, and organizational leadership.

You’ll work closely cross‑functionally to ensure our products are designed, developed, and validated with security at the core.

Your work will directly influence how we assess risk, define mitigations, validate security requirements, and scale secure engineering practices across the company.

This role is ideal for someone who can operate both strategically and hands‑on.

You should be comfortable driving high‑level security architecture and process discussions while also diving deep into technical details when needed.

Strong communication and stakeholder management skills are essential, as you’ll often act as the security voice across the organization.

What you’ll be driving

You will lead and evolve the cybersecurity engineering practices that support Vay’s remote driving technology and vehicle platforms. In order to do that, you will:

• Develop, define, and maintain cybersecurity processes aligned with ISO 21434 and other relevant standards and frameworks such as ISO 27001 and UNECE R155/R156.
• Perform security risk assessments and maintain the Threat Analysis and Risk Assessment (TARA) work products.
• Define cybersecurity requirements and collaborate with cross‑functional engineering teams to implement effective mitigations.
• Partner with Safety, Systems, Embedded, and Validation teams to ensure secure product development throughout the lifecycle.
• Drive security architecture discussions and influence system‑level design decisions across multiple domains.
• Create and evolve security testing and validation strategies for vehicle and remote driving systems.
• Support secure OTA update mechanisms and secure communication architectures.
• Represent cybersecurity topics in internal and external technical discussions and reviews.
• Help build scalable security processes that support the growth of Vay’s commercial fleet and technology platform.
• This might be a great fit if

You are an experienced security engineer who enjoys working across organizational boundaries, influencing complex technical systems, and building products that operate safely in the real world.

• 8+ years of experience in cybersecurity engineering.
• 2+ years of experience working on automotive, robotics, Io T, or other embedded/safety‑critical products.
• Strong understanding of automotive cybersecurity principles, automotive networks, and OTA update mechanisms.
• Experience performing security risk assessments and maintaining TARA work products.
• Familiarity with ISO 21434, UNECE WP.29 R155/R156, and related automotive cybersecurity standards.
• Understanding of embedded systems development and secure software development practices.
• Knowledge of cryptographic concepts and secure communication principles.
• Ability to assess security vulnerabilities, prioritize risks, and define practical mitigations.
• Excellent communication, planning, and stakeholder management skills.
• Comfortable operating both strategically and hands‑on in fast‑moving engineering environments.
• Why choose Vay
• Global team of smart, motivated people from 30+ countries.
• Huge scope for impact in a fast‑paced environment.
• ESOP stock options: A stake in Vay’s future – not just a salary.
• Subsidised Urban Sports Club or Fit X membership.
• All team members receive 30% off Vay rides.
• Relocation financial assistance for relocating to Berlin.
• Fully funded German lessons.
• Regular team events throughout the year.

We are aware that diversity has many different dimensions but to start, we will be tracking gender and ethnicity, as it is measurable and concrete.

This data is held completely separately from the application and kept in the highest confidence.

We consider our work on diversity, equity, and inclusion to be an ongoing effort, and we welcome suggestions and comments.

We welcome applications from all backgrounds and experiences. If you’re excited about shaping something truly groundbreaking, we’d be happy to hear from you.

#J-18808-Ljbffr