Why GM Financial Cybersecurity?
Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.
Cybersecurity is central to our strategic vision, so you’ll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.
Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.
About the role:
The Cybersecurity Engineer is responsible for developing, deploying, monitoring, tuning, evaluating, reporting and maintaining systems and procedures; and to identify and mitigate threats to the corporate network, corporate assets and corporate users. This team member will identify core requirements, design and implement security technologies and work with stakeholders to perform ongoing tuning and alerting on those technologies. Security technologies may include, but are not limited to: Data Loss Prevention (DLP), Security Incident Event Management (SIEM), User Behavior Analytics, Host Intrusion Prevention (HIPS) and Web/Email Gateway. This team member will be responsible for both technical implementation of systems and communication of security requirements to management and security leadership. Additionally, this team member will be responsible, as necessary, with assisting in investigations into security threats.
In this role you will:
- Prepares technical requirements and standards
- Assists in the identification, engineering and designing of security technologies including, but not limited to: Security Incident and Event Managers (SIEM) and threat intelligence solutions, Web filtering (proxy, network AV), Intrusion Detection and Prevention Systems (IDS/IPS), Endpoint security solutions, Data Loss Prevention (DLP), Vulnerability Management (VM), Threat Intelligence and Threat Detection, Web Application Firewalls (WAF), Email Gateways, Breach Mitigation, Certificate Management, SSL encryption and decryption, Identity Management, Cloud Security, Database Security, Web Gateways, VPNs and Firewalls
- Performs analysis of system logs to identify unauthorized use or access
- Creates, analyzes and communicates security metrics to leadership
- Participates in emergency response team activities for responding to various security incidents
- Provides in-depth support for information security incidents including internal violations, hacker attacks, virus and system outages
- Prepares and updates information procedures, standards and/or other technical requirement documents
- Participates in periodic information systems risk assessments
- Develops detailed proposals and plans for new information security systems that would enhance or enable new capabilities for network or host systems
- Recommends and evaluates security tools to identify more efficient and effective security measures
What makes you an ideal candidate?
- Local and wide area networking concepts, principles and protocols
- Advanced knowledge in Infrastructure design and management
- Working knowledge of management processes such as personnel administration, planning and budgeting
- Strong working knowledge of Intel platforms, iSeries and pSeries servers
- Advanced understanding of IT Service Management (ITSM) best practices and processes
- Experience with UML Design Tools
- Advanced knowledge of TCP/IP, OSI model and imp subnetting
- High level understanding of technology infrastructure, security concepts and platforms
- Demonstrated success in project management
- Advanced knowledge of IBM pSeries hardware, operating systems and TSM backup infrastructure
- Advanced knowledge of the OSI model and security that is associated with each layer
- Understanding of routing and switching protocols as they relate to load balancing
- Strong understanding of application layer protocols including HTTP, SSH, SSL and DNS
- Knowledge and stay abreast on the latest security and privacy legislation, regulations, advisories, alerts and vulnerabilities
- Knowledge of IT security processes and controls as well as IT infrastructure and networking technical knowledge
- Proven expertise developing custom rule sets for tools to identify specific attacks and exploits based on feedback and requirements from business stakeholders including Compliance and Legal Counsel
- Possess understanding of cloud technologies and concepts
- Experience securing cloud deployments on common platforms like Microsoft Azure, Amazon Web Services, or Google Cloud Platform
- Experience with deploying environments by defining infrastructure as code (IaC)
- Experience with securing container deployments, Kubernetes, managed Kubernetes PaaS services, Agile environments, and DevOps environments
- Experience with managing infrastructure through CI/CD pipelines
- Knowledge of Linux operating systems and microservice architecture
- Background in scripting and automation in widely used languages such as Python, Go, Ruby, etc.
- Detailed knowledge of declarative IaC approaches and immutable infrastructure is a plus
- Familiarity with Terraform is a plusAbility to think strategically and make collaborative decisions
- Ability to apply structured analysis methods to various types of data to establish trends, determine variability and business impact
- Communicates quickly, clearly, concisely, appropriately and intelligently
- Foster open communication, speaks with impact, listens to others and writes effectively
- Experience with alternate management methods using SSH, serial connections and the command-line interface TMSH
- Ability to effectively negotiate with vendors on upgrades and acquisitions
- Effective planning, time management, negotiation and delegation skills
- Expert level IT security processes and controls knowledge as well as IT infrastructure and networking technical knowledge
- Ability to approach problems with an open-mind and create new and innovative ideas and methods
- Advanced technical writing
- Experience in documentation tools such as Visio and Microsoft Office products
- Advanced information security standards/frameworks (i.e., NIST Cybersecurity Framework, ISO 27001) skills
- Advanced experience with Network and VLAN segmentation
- Strong analytical skills
- Ability to approach problems with an open-mind, use existing information and resources
- Creative, innovative, problem-solving and maximizing your potential to solve problems and improve methods
- Think positively when faced with obstacles, build on others ideas, think logically and intuitively
- Detailed oriented
Work Experience
- 1-5 years of experience in large and complex business environments with a successful track record working directly with senior level management preferred
- 1-5 years of experience in one or more of the following domains: Cybersecurity, Information Security, Network Engineering, or Network Operations, Information Technology, Application Development preferred
- High School Diploma or equivalent required
- Bachelor’s Degree in related field or equivalent work experience strongly preferred
Licenses and Certifications
- One or more security related certifications, such as CISSP, CCNP-Security, GIAC, CEH, or CPTS highly preferred
Additional Knowledge and Skills
Working effectively within an AI enabled environment:
- Ability to use AI tools (e.g., Microsoft Copilot) to support daily work
- Skills in evaluating AI outputs for accuracy, compliance, and bias
- Experience integrating AI into workflows to improve efficiency or insights
- Familiarity with AI assisted research, summarization, and content generation
- Understanding of responsible AI use, including ethics and data protection
- Experience with AI assisted software development or automation
- Knowledge of prompting techniques to improve output quality
- Awareness of emerging GenAI capabilities and limitations
What We Offer: Generous benefits package available on day one to include: 401K matching, bonding leave for new parents (12 weeks, 100% paid), tuition assistance, training, GM employee auto discount, community service pay and nine company holidays.
Our Culture: Our team members define and shape our culture — an environment that welcomes innovative ideas, fosters integrity, and creates a sense of community and belonging. Here we do more than work — we thrive.
Compensation: Competitive pay and bonus eligibility.
Work Life Balance: Hybrid work environment, 4-days a week in office.
#GMFJobs #LI-Hybrid
Skills Required
- Local and wide area networking concepts, principles and protocols
- Advanced knowledge in infrastructure design and management
- Working knowledge of personnel administration, planning and budgeting processes
- Strong working knowledge of Intel platforms, iSeries and pSeries servers
- Advanced understanding of ITSM best practices and processes
- Experience with UML design tools
- Advanced knowledge of TCP/IP, OSI model and subnetting
- Understanding of routing and switching protocols and load balancing
- Strong understanding of application layer protocols including HTTP, SSH, SSL/TLS and DNS
- Knowledge of IT security processes and controls and infrastructure/network technical knowledge
- Proven expertise developing custom rule sets for detection tools (SIEM, IDS/IPS)
- Understanding of cloud technologies and concepts
- Experience securing cloud deployments on Azure, AWS, or GCP
- Experience deploying environments using Infrastructure as Code (IaC)
- Experience securing container deployments and Kubernetes (including managed PaaS)
- Experience managing infrastructure through CI/CD pipelines
- Knowledge of Linux operating systems and microservice architecture
- Scripting and automation experience in Python, Go, or Ruby
- Experience with alternate management methods using SSH, serial connections and TMSH
- Advanced technical writing and documentation (Visio, Microsoft Office)
- Advanced information security standards/frameworks (NIST Cybersecurity Framework, ISO 27001)
- Advanced experience with network and VLAN segmentation
- Familiarity with Terraform and declarative IaC / immutable infrastructure (plus)
- Detailed knowledge of declarative IaC approaches and immutable infrastructure (plus)
- One or more security certifications (CISSP, CCNP-Security, GIAC, CEH, CPTS)
- 1-5 years experience in Cybersecurity, Information Security, Network Engineering, Network Operations, IT or Application Development
- High School Diploma or equivalent
- Bachelor's degree in related field or equivalent work experience
- Ability to use AI tools (e.g., Microsoft Copilot) and evaluate AI outputs
GM Financial Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about GM Financial and has not been reviewed or approved by GM Financial.
-
Strong & Reliable Incentives — Annual and performance bonuses are described as meaningful additions to total compensation. In several functions, incentives reliably boost take-home pay when available.
-
Leave & Time Off Breadth — Generous paid time off, corporate and floating holidays, and paid volunteer time are emphasized. Time-away programs contribute significantly to perceived total rewards.
-
Parental & Family Support — Paid parental leave and family-friendly policies are highlighted, with recent expansions mentioned in some areas. Support for bonding time is seen as a notable strength of the package.
GM Financial Insights
What We Do
GM Financial is the captive finance company and the wholly owned subsidiary of General Motors and is headquartered in Fort Worth, Texas. The company is a global provider of auto finance solutions, with operations in North America, Latin America and China. Through our long-standing relationships with auto dealers, we offer attractive retail loan and lease programs to meet the needs of each customer. We also offer commercial lending products to dealers to help them finance and grow their businesses. GM Financial employs more than 9,000 hard-working team members, and we're always looking for new people with diverse talents. GM Financial is a workplace where dedicated people have the opportunity to work together and celebrate our successes. Our culture is based on respect, integrity, innovation and personal development. GM Financial is committed to strengthening the communities where we live and work. Each year, we select several philanthropic organizations to support through our Signature Events program. The company and its team members actively support these organizations through many company-wide initiatives; in addition we support numerous other nonprofit organizations through sponsorships and monetary donations.
