Rivian is seeking an experienced Application Security Engineer to join their Enterprise Cybersecurity team. This role focuses on enhancing and maintaining the secure software development lifecycle (SSDLC) at Rivian. The ideal candidate will guide software development teams in developing secure code and identifying application security vulnerabilities. The position requires a passion for cybersecurity and a commitment to staying current with industry best practices.

• Passion for Cybersecurity and a desire to stay current with industry best practices and tools.
• Proven technical proficiency in software development or scripting, such as Go or Python.
• At least 2 years of application security experience.
• Hands-on experience with reviewing and remediating common software vulnerabilities.
• Experience with Gitlab CI/CD or other popular DevOps technologies.
• Strong problem-solving and decision-making capabilities.

• Assess security scanner findings (SAST, DAST) within source code and guide application teams to prioritize and resolve issues.
• Integrate and optimize security tooling within Gitlab CI/CD and other DevOps technologies to ensure secure-by-design development.
• Review source code and application architectures to identify and communicate security vulnerabilities in proposed designs.
• Work closely with Rivian’s penetration testing team to identify remediations for security vulnerabilities.
• Coordinate the ingestion and prioritization of vulnerabilities reported through Bug Bounty initiatives.

• Employees at Rivian are often offered comprehensive health, dental, and vision insurance, a 401(k) with company match, ESPP and potential RSU grants, performance bonuses, and generous time off including paid parental and sick leave. Perks can include 24/7 mental-health coaching and therapy, Hinge Health for Anthem enrollees, tuition assistance and professional development, plus on-site food and a wide range of employee discounts on items like computers, mobile phones, home loans, and pet care.