Top Cybersecurity Jobs

Owns secure architecture for in-vehicle communications, including message authentication, firewalls, and Automotive Ethernet security. Translates threat assessments and architectural decisions into testable requirements for engineering and suppliers, leads security design reviews, maintains specifications across software-defined vehicle platforms, and serves as a subject-matter expert. The role requires strong embedded and automotive cybersecurity expertise, stakeholder alignment, and pragmatic security judgment.

Monitor, triage, and investigate cybersecurity alerts across endpoint, network, cloud, identity, application, and manufacturing environments. Use SIEM, EDR, NDR, SOAR, threat intelligence, and cloud security platforms to identify threats, hunt for malicious activity, and improve detection logic. Create scripts, queries, dashboards, and automation workflows; support tool integrations and incident investigations; document findings; and collaborate with security and engineering teams. Participate in a 24x7 on-call rotation.

Build and operate ETL and data-ingestion pipelines consolidating OT cybersecurity data into Databricks. Develop Python and SQL solutions, data-quality controls, monitoring, and automation; analyze vulnerabilities and cyber risks; and create Power BI dashboards supporting remediation prioritization. Collaborate with cybersecurity, manufacturing, plant, and data engineering teams, document data processes, and improve OT vulnerability-management visibility and reporting.

Designs, implements, assesses, and improves cybersecurity and IT controls across cloud, SaaS, identity, infrastructure, and data environments. The role engineers assurance workflows, automation, evidence collection, and continuous monitoring; conducts control assessments; evaluates technical evidence; identifies cyber and IT risks; validates remediation; and delivers executive-ready reporting. It partners with Cybersecurity, IT, Finance, engineering, and business teams to strengthen governance, accountability, and risk-based decision-making.

Lead GM's Software Supply Chain Security function: translate strategy into execution, build and coach a high-performing team, own KPIs, and embed secure-by-design controls across source control, build pipelines, containers, SBOM, third-party software, and developer tooling while partnering with engineering, platform, cloud, procurement, and risk.

Lead GM's Secure Development & Application Security function to embed developer-friendly preventative and detective controls across the software lifecycle. Define roadmap for SAST/DAST, API and AI security, runtime resilience; own metrics and operational performance; partner with engineering, platform, product teams; build talent, scale programs, and drive risk reduction through measurable outcomes.

Lead design and execution of GM's global cybersecurity awareness programs, focusing on phishing simulations, leader enablement, awareness campaigns, role-based training, and metrics-driven improvements. Partner cross-functionally to translate threat data into targeted education and support AI-focused application security initiatives.

Lead and grow an offensive security team to validate defenses via penetration testing, red teaming, adversary emulation, and responsible disclosure. Set roadmap, KPIs, staffing and operating model; prioritize remediation, establish scalable testing across web, API, cloud, identity, container, and delivery pipelines; drive cross-functional alignment and measurable risk reduction.

Lead execution of cybersecurity controls, network refreshes, and risk-reduction across manufacturing sites. Partner with plant leadership and IT, manage schedules, resolve cross-functional issues, and lead a team of cybersecurity execution engineers while ensuring safety, quality, and production are not impacted.

Design, build, and operate security-focused software, services, automation frameworks, APIs, and developer platforms. Integrate security controls into CI/CD and cloud-native workflows, implement identity and access-management capabilities, conduct secure code reviews and threat modeling, and maintain security telemetry systems. Collaborate with engineering, security, and compliance teams, support incident response, translate emerging threats into engineering requirements, and mentor engineers on secure coding and architecture.