Cyber Security Engineer (Automotive AI)

Location: Leonberg, Germany; hybrid working model with in-person collaboration in the office and remote work

Company

hirify.global is building an AI platform for autonomous driving, using embodied AI to enable vehicles to learn from real-world experience and support scalable, mapless vehicle automation.

What you will do

• Define system assets, preliminary security architecture, and lead TARA assessments for core onboard software.
• Identify internal and external vulnerabilities, assess impact and feasibility, and derive control mitigations.
• Develop cybersecurity concepts and plans supporting OEM compliance with ISO/SAE 21434.
• Lead security requirements and validation for DevOps nightly regression flows, design reviews, vulnerability management, and penetration testing.
• Collaborate with OEMs, Tier 1 suppliers, security consultants, and red teams on requirements, assumptions, and penetration testing.
• Review hardware trust boundaries, key provisioning, secure boot integration, and in-vehicle security architecture.

Requirements

• 5+ years of experience in cybersecurity systems engineering.
• Experience applying TARA, STRIDE, HEAVENS 2.0, attack trees, or similar threat-analysis frameworks.
• Understanding of ISO/SAE 21434, cybersecurity goals, vehicle trust boundaries, secure diagnostics, and network segmentation.
• Familiarity with Secure Boot, TPMs, HSMs, key provisioning, CVEs, and common vulnerability classes in C++, C, and Python codebases.
• Hands-on experience with fuzzing, static analysis, reverse engineering, secure software engineering, systems integration, and testing.
• Ability to enforce security gates in CI/CD pipelines and translate domain analysis into technical and product requirements.

Nice to have

• Familiarity with automotive cybersecurity, ECU architecture, and automotive protocols.
• Experience using Wireshark, CANoe, Binwalk, Ghidra, IDA, Metasploit, AFL, or similar tools.

Culture & Benefits

• Hybrid work combining office collaboration with focused remote work.
• Relocation support and visa sponsorship where applicable.
• Core hours and hands-on work in vehicle workshops and labs.
• Learning and development budgets for training, conferences, and professional growth.
• Market-benchmarked salary, equity, health and dental insurance, enhanced parental leave, retirement or pension benefits, wellbeing support, and team socials.

Hiring process

• Initial recruiter call lasting 30 minutes.
• Competency interview focused on domain knowledge, followed by deep-dive technical interviews covering security strategy, software architecture, and platform topics.
• Final 30-minute interview focused on mission and values alignment.