Security Operations Engineer, Wayve

• Hands-on experience in security monitoring, detection engineering, or SOC environments
• Experience working with log data, SIEMs, or observability platforms
• Strong understanding of:
• Detection engineering and alert tuning
• Attacker behaviour (e.g. MITRE ATT&CK)
• Experience working with distributed or non-traditional environments, such as: IoT, OT, embedded systems, or edge compute
• Ability to write queries, detections, or scripts (e.g. Python, SQL, KQL, etc.)
• Comfortable working cross-functionally with engineering teams to improve telemetry
• Strong analytical and problem-solving skills
• We understand that everyone has a unique set of skills and experiences and that not everyone will meet all of the requirements listed above. If you’re passionate about self-driving cars and think you have what it takes to make a positive impact on the world, we encourage you to apply

Desirable

• As a Security Engineer within Wayve’s Security Operations function, you will focus on building and scaling monitoring and detection capabilities across our vehicle fleets, including both:
• R&D vehicle fleet (development and testing vehicles)
• Robotaxi fleet (customer-facing vehicles)
• These environments represent distributed, safety-critical, and non-traditional attack surfaces, requiring bespoke approaches to telemetry, detection, and response
• Working under the SecOps Engineering Lead, your primary focus will be vehicle-centric detection engineering and telemetry expansion, ensuring we have meaningful visibility into vehicle systems, edge compute, and fleet operations
• You will also contribute secondarily to monitoring, detection, and incident response across Wayve’s broader IT and cloud estate, helping maintain a cohesive security operations capability across all environments
• This is a hands-on engineering role, ideal for someone who enjoys solving hard visibility problems in complex, real-world systems
• Monitoring & Detection
• Build and tune detections across R&D and robotaxi fleets
• Onboard and utilise vehicle telemetry (e.g. onboard systems, edge compute, fleet pipelines)
• Contribute to monitoring and detection across cloud and IT environments
• Improve detection coverage, playbooks, and automation
• Telemetry & Instrumentation
• Define and improve security logging with autonomy, robotics, and platform teams
• Ensure vehicle telemetry is structured and usable for detection
• Threat Detection & Investigation
• Investigate alerts and anomalies across fleet and supporting systems
• Perform triage, root cause analysis, and threat hunting
• Incident Response
• Support response activities across vehicle fleets and backend systems
• Assist with evidence collection and post-incident reviews