Technical Program Manager, Vehicle Security

Waymo’s Product Management Team is a mission-driven team responsible for writing and enacting first-of-their-kind playbooks to bring fully autonomous driving technology to market. Our team develops simple solutions for complex problems by orchestrating cross-functional efforts to safely drive Waymo’s technology and the products it enables forward. We do this by understanding the customer, the business, and the technology. We are humble about the scope of our work, collaborative in our approach to problem-solving, and ambitious about our vision for the future.

This role follows a hybrid work schedule and reports to the Manager of Technical Program Management, Cybersecurity.

You will:

• Design, own, and drive the horizontal vehicle cybersecurity roadmap, managing the interplay between base vehicle platforms and the Waymo Driver autonomous driving system across all existing and new vehicle platforms.
• Coordinate and align Waymo internal engineering, product management, and operations on base vehicle cybersecurity requirements, timing, and readiness.
• Govern the end-to-end Vehicle Security Requirement Process Flow from ideation, risk-based triage, requirement definition, feature design, commitment, implementation and verification and stakeholder governance.
• Drive regular software release cybersecurity reporting, tracking key metrics for upcoming software releases and providing stakeholder updates as to the status, risks and success likelihood of cybersecurity features.
• Partner effectively with internal teams so cybersecurity features have clear handoff criteria and owners after Production Readiness Review (PRR). Systematically identify where security controls create operational friction or negatively affect fleet usage, driving cross-functional technical solutions to deployment with the owning teams within agreed operational timelines.
• Work proactively to ensure base vehicle security architectures meet Waymo's highest security bar and conform to applicable automotive standards and regulations (e.g., ISO/SAE 21434, UN ECE R155, UN ECE R156).

You have:

• 8+ years of relevant work experience, including 5+ years in Technical Program Management, within complex embedded systems, product security, or safety-critical engineering environments (e.g., automotive, aerospace, defense, or robotics).
• A BA/BS degree in Computer Science, Electrical Engineering, Cybersecurity, or equivalent practical experience.
• Demonstrated technical fluency in embedded and modern vehicle cybersecurity concepts with the ability to act as a technical peer to Systems Engineering and Security Engineering when discussing vehicle networks (CAN, Automotive Ethernet, ECUs), autonomous driving hardware/software systems and onboard security features.
• Proven track record of leading multi-company and cross-functional initiatives spanning external OEM/supplier partners and internal embedded, cloud, systems engineering, and fleet operations teams.
• Superior skills in requirements tracking, management, governance and software release reporting including navigating cross-functional systems engineering workflows, risk prioritization and release readiness metrics.
• Strong ability to structure ambiguous technical problem statements into clear, executable program plans, driving alignment and accountability across partner organizations.

We prefer:

• Engineering background in Embedded Systems, Firmware or Product Security Architecture, with hands-on experience in embedded security feature implementation (e.g. SecOC, secure boot, trust zones, diagnostic locking/Service29, Automotive Ethernet, Secure Boot, TrustZone or OTA update mechanisms).
• Prior experience defining and leading product security programs compliant with automotive or safety-critical standards and risk frameworks (ISO/SAE 21434, UN ECE R155/R156, TARA).
• Experience establishing software release reporting metrics and decision-making frameworks for technical risk acceptance, release cutoffs and waivers.
• Familiarity with operational security workflows and their fleet impact (e.g., Service29 OBD-II access automation, tamper detection alerting).
• Experience identifying and mitigating operational friction introduced by security controls, balancing fleet availability and serviceability with rigorous cybersecurity standards.