Cybersecurity Application Security Engineer

Rivian•Atlanta, GA

About The Position

We are seeking an experienced Application Security Engineer to join our Enterprise Cybersecurity team as an application security engineer to support the broader application security program. The role will be crucial in enhancing and maintaining the secure software development lifecycle (SSDLC) at Rivian. The ideal candidate will guide software development teams to develop secure code and identify and remediate application security vulnerabilities.

Requirements

Passion for Cybersecurity and a desire to stay current with industry best practices and tools.
Proven technical proficiency in software development or scripting (e.g., Go, Python) to engineer security-focused tools and automated workflows.
2+ years of application security experience.
Hands on experience with reviewing and remediating common software vulnerabilities
Experience with Gitlab CI/CD or other popular DevOps technologies
Strong problem-solving and decision-making capabilities

Nice To Haves

Experience in the automotive, manufacturing, or technology industries.
Experience with cloud native (AWS preferred) and Kubernetes hosted applications
Experience performing threat modeling and security reviews

Responsibilities

Assess security scanner findings (SAST, DAST) within our source code and help guide application teams prioritize and resolve these issues.
Integrated and optimized security tooling within Gitlab CI/CD and other DevOps technologies to ensure 'secure-by-design' development
Review source code and application architectures to identify and communicate security vulnerabilities in proposed designs.
Work closely with Rivian’s penetration testing team to identify remediations for security vulnerabilities identified.
Coordinate the ingestion and prioritization of vulnerabilities reported through Bug Bounty initiatives.