Staff Product Security Engineer
Rivian and Volkswagen Group Technologies25 days ago
Palo Alto, CA, USAStaff+
Base Salary
$207k - $284k/yr
Responsibilities
- Perform ECU-level and feature-based threat assessments and risk analyses, including asset definition, threat scenarios, risk calculation, impact analysis, and attack-potential evaluation.
- Derive high-level security requirements into system, subsystem, and ECU-level requirements in collaboration with security architecture and development teams.
- Develop and execute manual and automated positive, abuse, functional, and non-functional security tests across vehicle, system, subsystem, and ECU levels.
- Create test cases for software-in-the-loop and hardware-in-the-loop environments using languages including Python, Go, Java, C, C++, and Rust.
- Validate supplier components without source-code access and review failed tests, recommend mitigations, and validate subsequent fixes.
- Document, triage, and report validation results to product security teams and joint-venture partners for UN R155 compliance evidence.
- Collaborate with GRC, security engineering, software development, cloud engineering, and vehicle software teams on security validation and CSMS processes.
- Provide technical leadership in securing vehicles and related infrastructure.
Requirements
- Preferred M.Sc. in Information Security, Computer Science, Computer Engineering, or a related field.
- 8+ years of experience performing risk analysis, testing, and validation of security requirements in embedded device development.
- 5+ years of experience in the automotive industry or embedded device development.
- 3+ years of experience validating security requirements on ECUs.
- Knowledge of ISO 21434 and UN R155 and their application to security validation, type approval, and homologation.
- Ability to work in a fast-paced development environment with a hands-on, proactive approach.
- Strong teamwork and communication skills.
Benefits
- Competitive base salary, annual company performance bonus eligibility, and equity in the form of RSUs for eligible full-time positions.
- Comprehensive benefits may include health coverage, retirement savings, time off, and family planning programs, with offerings varying by country.