The role focuses on security and privacy assurance for Rivian's vehicle systems, including in-vehicle platforms, firmware, and charging infrastructure. The candidate will work on threat modeling, security requirements, and design reviews for various vehicle technologies. This hands-on position requires collaboration with both Rivian and its joint venture partner, Volkswagen Group Technologies. The successful candidate will ensure that security and privacy measures are effectively integrated into the vehicle systems.

• 8+ years in security engineering with hands-on experience in embedded, automotive, or safety-critical product security.
• Experience in firmware analysis, secure boot, SoC and ECU security, and automotive network protocols.
• Applied PKI experience including key hierarchy design and certificate provisioning.
• Practical privacy engineering experience in data flow documentation and de-identification mechanisms.
• Working knowledge of ISO/SAE 21434 and UNECE R155/R156.

• Own threat modeling and design review for zonal E/E architecture and vehicle compute.
• Write and drive the adoption of security requirements with platform engineering teams.
• Map and document data flows through the systems, specifying minimization and retention requirements.
• Build and validate privacy enforcement mechanisms for telemetry and sensor data.
• Analyze product vulnerability reports and determine exploitability and design impact.

• Employees at Rivian are often offered comprehensive health, dental, and vision insurance, a 401(k) with company match, ESPP and potential RSU grants, performance bonuses, and generous time off including paid parental and sick leave. Perks can include 24/7 mental-health coaching and therapy, Hinge Health for Anthem enrollees, tuition assistance and professional development, plus on-site food and a wide range of employee discounts on items like computers, mobile phones, home loans, and pet care.