Sr. Security Platform Engineer

Rivian and Volkswagen Group Technologies•Irvine, CA

2d•$135,100 - $185,800

About The Position

Security Platform Engineering is at the core of our ability to deliver secure, trusted products. We are seeking a highly motivated security engineer to drive high-impact security initiatives across our vehicle ecosystem, balancing security objectives with business velocity. This role requires someone who can see the complete picture - from low-level firmware to cloud services - and make pragmatic decisions, work with a variety of stakeholders, and drive projects to completion.

Requirements

Bachelor's degree in Computer Science, Computer Engineering, or related field
4+ years of experience in product security, embedded security, or related security engineering role
Strong programming experience in high-level languages like Go, Rust, Python, or Java
Understanding of cryptographic principles and secure communication protocols
Technical versatility to thrive at both ends of the stack - from tweaking low-level firmware and embedded systems to developing full-stack solutions, with the collaborative skills to bring teams along for the journey

Nice To Haves

Comfort with embedded systems development (C/C++) and low-level programming
Familiarity with embedded security measures like secure boot, secure firmware update and secure storage
Experience working in a regulated industry (automotive, medical, aerospace) with complex connected products

Responsibilities

Drive end-to-end execution of vehicle security initiatives across software and hardware domains, taking on development, integration, and test responsibilities to ensure timely delivery
Develop and maintain threat models to guide security architecture decisions
Design and implement security features that enable scalable development practices
Arbitrate cross-functional discussions to ensure security controls are effective yet practical, finding solutions that work for all stakeholders
Work with product teams to integrate security early in the development lifecycle, providing guidance on secure design patterns and potential risks
Build and maintain security platforms and tools that enable teams to develop secure features efficiently
Champion security automation initiatives to scale security practices across a growing fleet and product portfolio