Product Security Validation Manager

Job description

About Rivian and VW Technology Rivian and Volkswagen Group Technologies is a joint venture between two industry leaders with a clear vision for automotive’s next chapter.

From operating systems to zonal controllers to cloud and connectivity solutions, we’re addressing the challenges of electric vehicles through technology that will set the standards for software-defined vehicles around the world.

The road to the future is uncharted.

By combining our expertise across connectivity, AI, security and more, we’ll map a new way forward.

Working together, we’ll create a future that’s more connected, more intelligent, more sustainable for everyone.

Role Summary As the Manager of Product Security Validation, you will work closely with Product Security, vehicle software development teams, and cloud engineering teams to build a team to validate that security requirements were met throughout the vehicle development lifecycle.

You will play a critical role in ensuring the security and resilience of RVT’s Products, providing leadership in securing vehicles and related infrastructure.

This role will be located at one of our RV Tech locations and report directly to the Red Team Lead, Vehicles.

Responsibilities ● Lead and grow security validation engineers in the Product Security Validation team.

● Be a hands-on technical lead with an understanding of automotive validation testing, security and carry out the following responsibilities of the Product Security Validation team: ● Generating and carrying out validation of security requirements: You will develop security tests, both positive tests and abuse tests, to ensure that security requirements have been met at the Vehicle, system, sub-system, and ECU level.

● Develop both manual and automated test cases: You will develop both functional and non-functional security tests to ensure that security requirements are met.

Test cases could be developed in multiple languages, including but not limited to JavaScript, Python, Go, Java, C, and C++ for multiple architectures.

And being able to build test cases that can be run on software in the loop (SIL) setups or hardware in the loop (HIL) benches.

Having access to the source for internally developed code, but also dealing with validating supplier parts to meet our requirements without access to the source code.

So some reverse engineering work might be required.

● Documenting validation testing: You will develop testing reports and compile results , and share with the Product Security GRC team as well as our core JV partners for evidence to enable their documentation of compliance to EU R155/156.

You will work with the GRC team on aligning to document formats and following ISO 214343 processes for generating and sharing this documentation across the organization.

● Collaborating with Software Development teams: You will be sharing results with development teams and reviewing issues and suggesting mitigations to failed tests.

As well as validating subsequent fixes.

As well as collaborating with other teams within Product Security, especially the Security Engineering team that builds the Security HILs. Qualifications ● B.S. in Information Security, Computer Science, Computer Engineering, or a related field.

● 2+ years managing teams that carry out security requirements validation in embedded device development ● 5+ years of experience in Automotive Industry or Embedded device development ● 5+ years of experience carrying out security requirements validation on ECUs (electronic control units) ● Knowledge of ISO 21434 / 24089 and EU R155/156 and applying it with regards to security validation ● Ability to work in a fast-paced development environment.

● Good team player with excellent communication skills.

● Hands-on approach, proactively identifying and filling in gaps where needed.

● Track-record of managing teams and helping people grow and develop.

Company Statements - JV Equal Opportunity Rivian and Volkswagen Group Technologies is committed to creating a diverse environment and is proud to be an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender, gender expression, gender identity, genetic information or characteristics, physical or mental disability, marital/domestic partner status, age, military/veteran status, medical condition, or any other characteristic protected by law.

We are also committed to ensuring compliance with all applicable fair employment practice laws regarding citizenship and immigration status.

Rivian and Volkswagen Group Technologies is committed to ensuring that our hiring process is accessible for persons with disabilities.

If you have a disability or limitation, such as those covered by the Americans with Disabilities Act, that requires accommodations to assist you in the search and application process, please email us at candidateaccommodations@rivian.com.

Candidate Data Privacy Rivian and VW Group Technologies (“Rivian and Volkswagen Group Technologies”) may collect, use and disclose your personal information or personal data (within the meaning of the applicable data protection laws) when you apply for employment and/or participate in our recruitment processes (“Candidate Personal Data”).

This data includes contact, demographic, communications, educational, professional, employment, social media/website, network/device, recruiting system usage/interaction, security and preference information.

Rivian and Volkswagen Group Technologies may use your Candidate Personal Data for the purposes of (i) tracking interactions with our recruiting system; (ii) carrying out, analyzing and improving our application and recruitment process, including assessing you and your application and conducting employment, background and reference checks; (iii) establishing an employment relationship or entering into an employment contract with you; (iv) complying with our legal, regulatory and corporate governance obligations; (v) recordkeeping; (vi) ensuring network and information security and preventing fraud; and (vii) as otherwise required or permitted by applicable law.

Rivian and Volkswagen Group Technologies may share your Candidate Personal Data with (i) internal personnel who have a need to know such information in order to perform their duties, including individuals on our People Team, Finance, Legal, and the team(s) with the position(s) for which you are applying; (ii) Rivian and Volkswagen Group Technologies affiliates; and (iii) Rivian and Volkswagen Group Technologies’ service providers, including providers of background checks, staffing services, and cloud services.

Rivian and Volkswagen Group Technologies may transfer or store internationally your Candidate Personal Data, including to or in the United States, Canada, and the European Union and in the cloud, and this data may be subject to the laws and accessible to the courts, law enforcement and national security authorities of such jurisdictions.

Please see our Candidate Data Privacy Notice (English) and Candidate Data Privacy Notice (Serbian) for more information.

Please note that we are currently not accepting applications from third party application services.

Required Skill Profession

Computer Occupations