Cybersecurity Application Security Engineer

About the role

Rivian is seeking an experienced Application Security Engineer to join its Enterprise Cybersecurity team. The role focuses on strengthening the Secure Software Development Lifecycle (SSDLC) by guiding development teams toward secure coding practices and ensuring software supply‑chain integrity.

Key responsibilities

• Review source code and application architectures to identify and communicate security vulnerabilities.
• Drive adoption of Software Bill of Materials (SBOM) for supply‑chain visibility, license compliance, and vulnerability tracking.
• Implement and manage automated Software Composition Analysis (SCA) to remediate open‑source and third‑party library risks.
• Develop and support security tooling and automated workflows within CI/CD pipelines for vulnerability triage, third‑party scanning, and threat modeling.
• Collaborate with penetration testing teams to define and apply remediation strategies.
• Support security configuration and countermeasure implementation based on emerging threats and industry trends.

Required profile

• Minimum 4 years of hands‑on application security experience.
• Strong problem‑solving and decision‑making abilities.
• Experience in automotive, manufacturing, or technology sectors is a plus.

Required skills

• Proficiency with GraphQL, AWS, React, Java, Node.js, Python.
• Experience with container technologies such as Docker and Kubernetes.
• Hands‑on knowledge of SAST and SCA vulnerability remediation.
• Ability to script or code security utilities using Python or Go.
• Familiarity with CI/CD tools, especially GitLab CI/CD.