Sr. Cybersecurity Engineer, OT
Rivian
- Location
- Atlanta, Georgia
- Employment
- Full Time
- Work model
- On-Site
- Level
- Senior
- Salary
- $111k – $138.7k/yr
Skills
About this role
About Rivian Rivian is on a mission to keep the world adventurous forever. This goes for the emissions-free Electric Adventure Vehicles we build, and the curious, courageous souls we seek to attract. As a company, we constantly challenge what’s possible, never simply accepting what has always been done. We reframe old problems, seek new solutions and operate comfortably in areas that are unknown. Our backgrounds are diverse, but our team shares a love of the outdoors and a desire to protect it for future generations.
Role
Summary We are seeking a Senior Cybersecurity Engineer to strengthen the security posture of our Operational Technology (OT) environment. In this role, you'll architect and implement robust protections for critical industrial systems, leveraging automation, scripting, and continuous monitoring to scale our security capabilities, while preserving safety and system uptime. This role will be located in Atlanta, GA and report to a Sr. Manager, Cybersecurity.
Responsibilities
Design, implement and maintain secure OT network architectures aligned with the Purdue model by implementing structured network segmentation, firewall policies, unidirectional gateways, and micro-segmentation strategies. Develop automation workflows (using Python, PowerShell, or Ansible) for OT configuration drift monitoring, compliance checks, and integration with OT visibility platforms Build continuous vulnerability management pipelines by correlating vendor firmware with live OT asset inventories. Manage OT-specific security tools and support continuous threat detection across industrial protocols Partner with Automation and Controls Engineers to evaluate PLC, HMI, and RTU configurations for security baseline hardening. Develop automated verification pipelines to validate software/firmware patches. Maintain continuous OT asset inventories and topology maps to track operational changes across facility lifecycles. Participate in Incident response processes and assist with containment, isolation, and forensic investigation.
Qualifications
Bachelor’s degree in Controls Engineering, Computer Science or equivalent practical experience. 6–8+ years of combined experience in OT/ICS cybersecurity, control systems engineering, or industrial automation with at least 3+ years focused specifically on OT security, network defense and scripting/automation. Deep hands-on knowledge of PLCs, HMIs, DCS, SCADA, RTUs from major automation vendors (Rockwell Automation, Siemens, Schneider Electric). In-depth understanding of the Purdue model, network segmentation and firewalls with hands on experience. Proficiency in Python, PowerShell, or Bash for building security automation tools and operational workflows. Strong understanding of CI/CD pipelines and version control systems (e.g., Git) for deploying and maintaining secure solutions. Proficiency with infrastructure-as-code tools (e.g., Terraform, Ansible) to automate and standardize security configurations. Working knowledge of industrial network protocols and hands-on experience deploying, automating, or managing OT-specific security tools. Functional knowledge and application of industrial standards including NIST SP 800-82, ISO 27001 Pay Disclosure Salary Range for this role is $111,000 - $138,700 for Georgia based applicants. This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. An employee’s position within the salary range will be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, experience, skills, geographic location, shift, and organizational needs. The successful candidate may be eligible for annual performance bonus and equity awards. We offer a comprehensive package of benefits for full-time and part-time employees, their spouse or domestic partner, and children up to age 26, including but not limited to paid vacation, paid sick leave, and a