Sr. Product Security Engineer
Rivian and Volkswagen Group Technologies4 months ago
Palo Alto, CA, USASenior
Base Salary
$163k - $224k/yr
Responsibilities
- Derive top-level security requirements into concrete system and subsystem requirements in collaboration with security architecture and development teams.
- Develop and execute manual and automated security tests, including functional, non-functional, positive, and abuse tests, across vehicle, system, subsystem, and ECU levels.
- Build security test cases for software-in-the-loop setups and hardware-in-the-loop benches using multiple programming languages and architectures.
- Validate internally developed software and supplier components, including components without source-code access.
- Document, triage, and compile validation results for product security teams and joint-venture partners.
- Support documentation and evidence needed for UN R155 compliance, type approval, and homologation.
- Review failed tests with software development teams, recommend mitigations, validate fixes, and collaborate with security engineering teams operating security HILs.
- Work with the GRC team to align documentation formats and follow CSMS processes.
Requirements
- Bachelor of Science degree in Information Security, Computer Science, Computer Engineering, or a related field.
- At least 2 years of experience validating security requirements in embedded device development.
- At least 3 years of experience in the automotive industry or embedded device development.
- At least 2 years of experience validating security requirements on electronic control units (ECUs).
- Knowledge of ISO 21434 and UN R155 and their application to security validation, type approval, and homologation.
- Ability to work in a fast-paced development environment.
- Strong teamwork and communication skills.
- Hands-on approach with the ability to proactively identify and fill gaps.
Benefits
- Eligibility for an annual company performance bonus program for full-time positions, with payments discretionary and not guaranteed.
- Eligibility for equity in the form of Restricted Stock Units (RSUs), subject to board approval and applicable plan terms.
- Comprehensive benefits for full-time employees, including health coverage, retirement savings, time off, and family planning programs.
- Benefits offerings vary by country.