Rivian is seeking an Incident Commander to enhance their cybersecurity response capabilities. This role focuses on minimizing impact and downtime during critical incidents through automation and observability. The Incident Commander will lead technical bridges and manage resources while ensuring effective communication. Candidates should have a strong background in security and a passion for protecting the environment.

• 5+ years of experience in product security, application security, or security architecture.
• Proven ability to manage complex, high-stress incidents with clarity and authority.
• Experience in Incident Response, DevOps, SRE, or Infrastructure Engineering.
• Proficiency in scripting languages such as Python, Go, or PowerShell.
• Deep understanding of cloud-native infrastructure (AWS/GCP/Azure) and containerized environments.

• Act as the primary Incident Commander for critical cybersecurity events.
• Drive technical bridges and manage cross-functional resources during incidents.
• Develop automation scripts and SOAR workflows to handle repetitive threats.
• Enhance threat detection capabilities by treating logs as data pipelines.
• Lead comprehensive After-Action Reviews (AARs) focusing on root cause analysis.
• Build and refine integrations between security and infrastructure tools.
• Participate in a structured on-call rotation for 24/7 operational continuity.

• Employees at Rivian are often offered comprehensive health, dental, and vision insurance, a 401(k) with company match, ESPP and potential RSU grants, performance bonuses, and generous time off including paid parental and sick leave. Perks can include 24/7 mental-health coaching and therapy, Hinge Health for Anthem enrollees, tuition assistance and professional development, plus on-site food and a wide range of employee discounts on items like computers, mobile phones, home loans, and pet care.