Director - Product Security

The role

You will lead a product security team to define and execute a multi-year security roadmap for a joint software-defined vehicle platform. You will embed security into zonal architecture, cloud infrastructure, and autonomous driving stacks.

What you will do

• Define and own the multi-year product security roadmap for the joint SDV platform.
• Embed security across the full software development lifecycle.
• Partner with engineering teams to conduct threat modeling and TARA.
• Establish secure coding guidelines and automated security tooling in CI/CD pipelines.
• Lead compliance and security engineering for automotive standards like ISO/SAE 21434 and UN Regulation No. 155.
• Build and operate a vulnerability management program.
• Manage a bug bounty program and coordinate penetration testing.
• Define and enforce security requirements for automotive suppliers and software vendors.
• Secure the AI and autonomy platform, including ML pipelines and in-vehicle AI systems.
• Build and lead the Product Security Incident Response Team (PSIRT).

Required qualifications

• 12+ years of progressive experience in cybersecurity.
• At least 5 years in product security leadership at a software-defined product company.
• Deep technical expertise in application security, embedded systems security, or automotive cybersecurity.
• Hands-on engineering background.
• Experience leading and upleveling an inherited product security or AppSec team.
• Ability to influence and drive security posture across engineering organizations without direct authority.
• Strong working knowledge of threat modeling methodologies (eg STRIDE, PASTA, TARA).
• Knowledge of secure SDLC practices and vulnerability management programs.
• Experience securing cloud-native architectures at scale (GCP, AWS, or Azure).
• Track record of operating at the executive level presenting to the board and C-suite.
• B.S. or M.S. in Computer Science, Computer Engineering, Electrical Engineering, or equivalent practical experience.

Nice to have

• Direct experience with ISO/SAE 21434, UN Regulation No. 155, or NHTSA cybersecurity best practices.
• Background in embedded security, firmware security, or hardware security.
• Experience at a mission-driven, high-velocity technology company.
• Familiarity with AI/ML security.

Benefits

• Competitive base salary
• Annual company performance bonus program
• Equity in the form of Restricted Stock Units (RSUs)
• Health coverage
• Retirement savings
• Time off
• Family planning programs

About the company

Rivian and Volkswagen Group Technologies is a joint venture between two industry leaders. They are addressing the challenges of electric vehicles through technology for software-defined vehicles.