Staff Product Security Engineer

About the role

The Staff Product Security Engineer will join the product security organization of Rivian and Volkswagen Group Technologies, a joint venture focused on software‑defined electric vehicles. You will work closely with vehicle software and cloud engineering teams to embed security throughout the product lifecycle.

Key responsibilities

• Conduct ECU‑level and feature‑based threat assessments and risk analyses using frameworks such as STRIDE and MITRE EMB3D.
• Translate high‑level security requirements into detailed system and subsystem specifications in collaboration with the security architecture team.
• Define and document UN R155‑compliant security requirements and support CSMS homologation activities.
• Design, implement, and validate security controls, including both manual and automated functional and abuse test cases.
• Develop test cases in languages such as Python, Go, Java, C, C++, and Rust for SIL and HIL environments.
• Lead the creation of security documentation and risk treatment plans for vehicle and cloud components.

Required profile

• Several years of experience in automotive or embedded security engineering.
• Strong understanding of threat modeling, risk analysis, and safety‑critical standards.
• Proven ability to work across cross‑functional software, hardware, and cloud teams.
• Experience with security testing, validation, and compliance processes.

Required skills

• Python
• Go
• Java
• C
• C++
• Rust
• STRIDE
• MITRE EMB3D