Technical Program Manager, Vehicle Security

Waymo is an autonomous driving technology company with the mission to be the world's most trusted driver. Since its start as the Google Self-Driving Car Project in 2009, Waymo has focused on building the Waymo Driver—The World's Most Experienced Driver™—to improve access to mobility while saving thousands of lives now lost to traffic crashes. The Waymo Driver powers Waymo’s fully autonomous ride-hail service and can also be applied to a range of vehicle platforms and product use cases. The Waymo Driver has provided over ten million rider-only trips, enabled by its experience autonomously driving over 100 million miles on public roads and tens of billions in simulation across 15+ U.S. states.

Waymo’s Product Management Team is a mission-driven team responsible for writing and enacting first-of-their-kind playbooks to bring fully autonomous driving technology to market. Our team develops simple solutions for complex problems by orchestrating cross-functional efforts to safely drive Waymo’s technology and the products it enables forward. We do this by understanding the customer, the business, and the technology. We are humble about the scope of our work, collaborative in our approach to problem-solving, and ambitious about our vision for the future.

This role follows a hybrid work schedule and reports to the Manager of Technical Program Management, Cybersecurity.

You will:

• Design, own, and drive the horizontal vehicle cybersecurity roadmap, managing the interplay between base vehicle platforms and the Waymo Driver autonomous driving system across all existing and new vehicle platforms.
• Coordinate and align Waymo internal engineering, product management, and operations on base vehicle cybersecurity requirements, timing, and readiness.
• Govern the end-to-end Vehicle Security Requirement Process Flow from ideation, risk-based triage, requirement definition, feature design, commitment, implementation and verification and stakeholder governance.
• Drive regular software release cybersecurity reporting, tracking key metrics for upcoming software releases and providing stakeholder updates as to the status, risks and success likelihood of cybersecurity features.
• Partner effectively with internal teams so cybersecurity features have clear handoff criteria and owners after Production Readiness Review (PRR). Systematically identify where security controls create operational friction or negatively affect fleet usage, driving cross-functional technical solutions to deployment with the owning teams within agreed operational timelines.
• Work proactively to ensure base vehicle security architectures meet Waymo's highest security bar and conform to applicable automotive standards and regulations (e.g., ISO/SAE 21434, UN ECE R155, UN ECE R156).

You have:

• 8+ years of relevant work experience, including 5+ years in Technical Program Management, within complex embedded systems, product security, or safety-critical engineering environments (e.g., automotive, aerospace, defense, or robotics).
• A BA/BS degree in Computer Science, Electrical Engineering, Cybersecurity, or equivalent practical experience.
• Demonstrated technical fluency in embedded and modern vehicle cybersecurity concepts with the ability to act as a technical peer to Systems Engineering and Security Engineering when discussing vehicle networks (CAN, Automotive Ethernet, ECUs), autonomous driving hardware/software systems and onboard security features.
• Proven track record of leading multi-company and cross-functional initiatives spanning external OEM/supplier partners and internal embedded, cloud, systems engineering, and fleet operations teams.
• Superior skills in requirements tracking, management, governance and software release reporting including navigating cross-functional systems engineering workflows, risk prioritization and release readiness metrics.
• Strong ability to structure ambiguous technical problem statements into clear, executable program plans, driving alignment and accountability across partner organizations.

We prefer:

• Engineering background in Embedded Systems, Firmware or Product Security Architecture, with hands-on experience in embedded security feature implementation (e.g. SecOC, secure boot, trust zones, diagnostic locking/Service29, Automotive Ethernet, Secure Boot, TrustZone or OTA update mechanisms).
• Prior experience defining and leading product security programs compliant with automotive or safety-critical standards and risk frameworks (ISO/SAE 21434, UN ECE R155/R156, TARA).
• Experience establishing software release reporting metrics and decision-making frameworks for technical risk acceptance, release cutoffs and waivers.
• Familiarity with operational security workflows and their fleet impact (e.g., Service29 OBD-II access automation, tamper detection alerting).
• Experience identifying and mitigating operational friction introduced by security controls, balancing fleet availability and serviceability with rigorous cybersecurity standards.

The expected base salary range for this full-time position across US locations is listed below. Actual starting pay will be based on job-related factors, including exact work location, experience, relevant training and education, and skill level. Your recruiter can share more about the specific salary range for the role location or, if the role can be performed remote, the specific salary range for your preferred location, during the hiring process.

Waymo employees are also eligible to participate in Waymo’s discretionary annual bonus program, equity incentive plan, and generous Company benefits program, subject to eligibility requirements.