Application Security Engineer - SSDLC & DevOps Defender

Watershed Ventures; Atlanta (GA); On-site; USD 88,000 - 110,000; Full time

Benefits offered by this job

Equity awards

Bonus potential

Comprehensive benefits

Job summary

Rivian is seeking an experienced Application Security Engineer to join our Enterprise Cybersecurity team to strengthen the secure software development lifecycle (SSDLC). You will guide development teams to write secure code and remediate vulnerabilities across our applications.

The role emphasizes integrating security tooling in CI/CD pipelines and collaborating with penetration testers to address findings, with a focus on building secure, scalable software for automotive and technology

Qualifications

• 2+ years of application security experience.
• Proven technical proficiency in software development or scripting (e.g., Go, Python).
• Hands-on experience with reviewing and remediating common software vulnerabilities.
• Experience with Gitlab CI/CD or other popular DevOps technologies.

Responsibilities

• Assess security scanner findings (SAST, DAST) within our source code and help guide application teams prioritize and resolve these issues.
• Integrated and optimized security tooling within Gitlab CI/CD and other DevOps technologies to ensure 'secure-by-design' development
• Review source code and application architectures to identify and communicate security vulnerabilities in proposed designs.
• Work closely with Rivian's penetration testing team to identify remediations for security vulnerabilities identified.
• Coordinate the ingestion and prioritization of vulnerabilities reported through Bug Bounty initiatives.

Skills

Go

Python

Application security

SAST/DAST

Gitlab CI/CD

DevOps tooling

Threat modeling

Tools

Gitlab CI/CD

AWS

Kubernetes

Job description

Rivian is seeking an experienced Application Security Engineer to join our Enterprise Cybersecurity team to strengthen the secure software development lifecycle (SSDLC). You will guide development teams to write secure code and remediate vulnerabilities across our applications.

The role emphasizes integrating security tooling in CI/CD pipelines and collaborating with penetration testers to address findings, with a focus on building secure, scalable software for automotive and technology