Senior Product Security Engineer - Automotive Systems

Rivian and Volkswagen Group Technologies; Palo Alto (CA); On-site; USD 207,000 - 258,000; Full time

Benefits offered by this job

Equity in RSUs

Annual performance bonus

Comprehensive health coverage

Retirement savings plan

Job summary

Rivian and Volkswagen Group Technologies in the United States seek a Product Security Engineer to drive security across the product lifecycle, collaborating with vehicle software, cloud, and security teams to define requirements and validation strategies.

You will create threat assessments for ECUs, derive system requirements, develop security tests in languages such as Python, Go, Java, C, C++, and Rust, and contribute to UN R155 documentation and CSMS processes.

Qualifications

• MSc in Information Security, Computer Science, Computer Engineering, or related field.
• 8+ years risk analyses, testing, and validation in embedded device development.
• 5+ years in automotive industry or embedded device development.
• 3+ years security requirements validation on ECUs (electronic control units).
• Knowledge of ISO 21434 and UN R155 and their application for security validation and homologation.

Responsibilities

• ECU- and feature-based threat assessments and risk analyses.
• Derivation of top-level requirements to system security requirements and test case development.
• Validation testing with security tests at vehicle, system, sub-system, and ECU levels.
• Development of manual and automated security tests in multiple languages (Python, Go, Java, C, C++, Rust).
• Documentation of validation testing and collaboration with GRC and CSMS processes.
• Collaboration with software development teams to review issues and mitigations.

Education

MSc in Information Security / related field

Tools

Python

Go

Java

C

C++

Rust

Job description

Rivian and Volkswagen Group Technologies in the United States seek a Product Security Engineer to drive security across the product lifecycle, collaborating with vehicle software, cloud, and security teams to define requirements and validation strategies.

You will create threat assessments for ECUs, derive system requirements, develop security tests in languages such as Python, Go, Java, C, C++, and Rust, and contribute to UN R155 documentation and CSMS processes.