Senior Embedded Cybersecurity Engineer — Automotive

Rivian; Riverdale (GA); On-site; USD 179,000 - 224,000; Full time

Benefits offered by this job

401(k) Plan

Employee Stock Purchase Program

Comprehensive benefits

Job summary

Rivian seeks a senior security engineer to own threat modeling and design review across vehicle compute, firmware, and OTA domains. You will define security requirements, map data flows, and implement privacy controls, working across in-house and RVT collaborations to secure vehicle systems from design through deployment.

The role emphasizes hands-on evaluation of embedded security, PKI provisioning, and lifecycle management, with a focus on privacy, data minimization, and compliance with

Qualifications

• 8+ years in security engineering, with substantial hands-on experience in embedded, automotive, or safety-critical product security.
• Hands-on capability in firmware analysis and reverse engineering, secure boot and chain of trust, SoC and ECU security, automotive network protocols and protection, hardware-backed key management, OTA update security.
• Applied PKI experience: key hierarchy design, certificate provisioning and rotation, revocation at scale, and device certificates that outlive the systems issuing them.
• Practical privacy engineering experience: data flow documentation, minimization and retention design, or de-identification, scrubbing, or deletion mechanisms in a shipping product.
• Demonstrated ownership of threat modeling and design review for shipping products, including leading engineers who built the system.
• Experience driving security requirements into engineering teams and getting them implemented.
• Working knowledge of ISO/SAE 21434 and UNECE R155/R156; ability to distinguish certification evidence from engineering truth.

Responsibilities

• Own threat modeling and design review for your domain: zonal E/E architecture, ECUs and vehicle compute, firmware, secure boot and chain of trust, key management, vehicle communications, or OTA.
• Write security requirements (functional and non-functional) and drive adoption with platform engineering teams.
• Map and document data flows, specifying minimization, retention and deletion requirements.
• Build and validate privacy enforcement mechanisms for telemetry, sensor and camera data, consent and deletion handling.
• Design and review PKI underneath vehicle systems: device identity, factory provisioning, code signing, mutual TLS, and lifecycle across the fleet.
• Analyze RVT security deliverables: read design, test claims and produce assessments.
• Authorize security and privacy engineering standards and reference patterns; drive adoption.
• Scope targeted security testing with Rivian's offensive security teams; turn findings into requirements.
• Participate in joint technical working groups with RVT Product Security on shared surfaces.
• Build tooling to make review/enforcement repeatable: analysis harnesses and data handling pipelines.

Skills

Security engineering

Embedded security

Firmware security

PKI

Privacy engineering

Threat modeling

Design review

Vulnerability assessment

Job description

Rivian seeks a senior security engineer to own threat modeling and design review across vehicle compute, firmware, and OTA domains. You will define security requirements, map data flows, and implement privacy controls, working across in-house and RVT collaborations to secure vehicle systems from design through deployment.

The role emphasizes hands-on evaluation of embedded security, PKI provisioning, and lifecycle management, with a focus on privacy, data minimization, and compliance with