AppSec Engineer: Secure SDLC, Coding & Equity

Rivian; Atlanta (GA); On-site; USD 88,000 - 110,000; Full time

Benefits offered by this job

paid vacation

paid sick leave

life insurance

medical insurance

dental insurance

vision insurance

short-term disability insurance

long-term disability insurance

401(k) plan eligibility

Employee Stock Purchase Program

Job summary

Rivian is seeking an experienced Application Security Engineer to join its Enterprise Cybersecurity team and strengthen the secure software development lifecycle across Rivian’s software. You will guide development teams to code securely while identifying and remediating vulnerabilities in a fast-paced environment.

The role emphasizes integrating security tooling into CI/CD pipelines, collaborating with pentesting teams, and managing Bug Bounty workflow to improve overall security posture.

Qualifications

• 2+ years of application security experience.
• Experience reviewing and remediating common software vulnerabilities.
• Proficiency in Go or Python for security tooling.
• Experience with Gitlab CI/CD or other DevOps technologies.
• Strong problem-solving and decision-making capabilities.

Responsibilities

• Assess security scanner findings (SAST, DAST) within our source code and help guide application teams prioritize and resolve these issues.
• Integrate and optimize security tooling within Gitlab CI/CD and other DevOps technologies to ensure 'secure-by-design' development.
• Review source code and application architectures to identify and communicate security vulnerabilities in proposed designs.
• Work closely with Rivian’s penetration testing team to identify remediations for security vulnerabilities identified.
• Coordinate the ingestion and prioritization of vulnerabilities reported through Bug Bounty initiatives.

Skills

Go

Python

Application security

Scripting

Problem solving

Security tooling

Tools

Gitlab CI/CD

Job description

Rivian is seeking an experienced Application Security Engineer to join its Enterprise Cybersecurity team and strengthen the secure software development lifecycle across Rivian’s software. You will guide development teams to code securely while identifying and remediating vulnerabilities in a fast-paced environment.

The role emphasizes integrating security tooling into CI/CD pipelines, collaborating with pentesting teams, and managing Bug Bounty workflow to improve overall security posture.