Senior Product Security Engineer (Embedded / Automotive)
Confirmed on the employer's own hiring board on Nov 1, 2026. First seen by Alion on Sep 27, 2026.
Join Vay, a pioneering company in the remote driving ecosystem. As a Senior Product Security Engineer, you will be instrumental in shaping the cybersecurity foundation of our technology platform. This cross-functional role involves collaboration with product security, systems engineering, software development, and organizational leadership. You will ensure that our products and systems are designed, developed, and validated with security at the core. Your work will directly influence risk assessment, mitigation definition, security requirement validation, and the scaling of secure engineering practices across the company.
Missions
- Contribuer à la conception, au développement et à la validation des produits et systèmes en intégrant la sécurité dès le départ.
- Collaborer avec des équipes interfonctionnelles pour évaluer les risques, définir des mesures d'atténuation et valider les exigences de sécurité.
- Assurer la mise en œuvre des pratiques d'ingénierie sécurisée à l'échelle de l'entreprise, en influençant directement les processus de sécurité.
Profil recherché
- Comfortable operating both strategically and hands-on in fast-moving engineering environments- This role is ideal for someone who can operate both strategically and hands-on. You should be comfortable driving high-level security architecture and process discussions while also diving deep into technical details when needed
- Excellent communication, planning, and stakeholder management skills
- Familiarity with security standards, regulatory frameworks, or structured security processes
- Strong technical depth and the ability to understand unfamiliar systems quickly
- The role can be scoped at a Senior looking for a step up or Principal level depending on your experience, technical depth, and ability to drive security topics across the organization
- Strong understanding of security architecture, secure software development, threat modelling, vulnerability management, and security risk assessment
- Experience working with complex products or systems involving multiple software, infrastructure, hardware, or networking components
- Experience defining security requirements and working with engineering teams to implement them
- Good understanding of authentication, authorization, cryptographic concepts, secure communication, and trust models
- Around 8+ years of experience in cybersecurity engineering, product security, application security, platform security, or related areas
- Ability to assess security vulnerabilities, prioritize risks, and define practical mitigations
- Strong communication and stakeholder management skills are essential, as you’ll often act as the security voice across the organization
- Experience securing embedded systems, firmware, robotics, IoT, industrial technology, aerospace, medical devices, automotive systems or other cyber-physical systems
- Automotive cybersecurity or vehicle systems security experience
- Familiarity with ISO 21434, UNECE R155/R156, IEC 62443, the Cyber Resilience Act (CRA) or similar standards and regulations
- Experience conducting TARA or comparable structured security risk assessments
- Knowledge of embedded Linux, secure boot, secure software updates, hardware-backed security or device lifecycle security