Bochum, North Rhine-Westphalia, DE (On-site)4 open jobs
Volkswagen Group is a global automotive company spanning 12 brands, automotive software through CARIAD, and electric, connected, and software-centric vehicle development.
The threat model at Volkswagen Group is unusually wide: 12 brands, 111 production facilities across 16 European countries plus operations in the Americas, Asia, and Africa, and a vehicle platform that is now explicitly software-defined. Founded in 1937 and headquartered in Wolfsburg, Germany, the Group spans passenger cars (Volkswagen Passenger Cars, Audi, SEAT, ŠKODA, Bentley, Bugatti, Lamborghini, Porsche), commercial vehicles and trucks (Volkswagen Commercial Vehicles, Scania, MAN), motorcycles (Ducati), and its own software company, CARIAD, which builds automotive software platforms and digital customer functions for the brands. Add 24 all-electric models offered in Europe and the connected-vehicle surface stops being hypothetical.
The technical stack the Group has committed to - battery technology, autonomous driving, artificial intelligence, electric mobility, and software-centric vehicle development - is exactly the stack where security work is hardest to retrofit. Perimeter thinking doesn't survive contact with an over-the-air update path, an AI-assisted driving function, or a production line that merges IT and OT. The work here spans the full chain: vehicle and embedded software, the CARIAD platform layer and digital customer functions, factory and manufacturing systems, and the corporate and supply-chain perimeter across a global footprint.
Scale is the point. Securing one carmaker is a known problem; securing Volkswagen Passenger Cars, Porsche, Lamborghini, Bugatti, and Bentley alongside Scania and MAN truck platforms, Ducati motorcycles, and a shared software company feeding all of them is a multi-domain systems problem with real physical consequences. The Group's stated direction - becoming "The Global Automotive Tech Driver" by 2035, with a focus on software, digital, and electric mobility - puts security work closer to the product than to a support function.
