Top Cybersecurity Jobs

Leads GM’s vehicle product cybersecurity compliance program, including controls frameworks, TARA, UNR155 and CSMS audits, global regulatory monitoring, audit readiness, control-gap remediation, and regulatory relationships. Partners with engineering, legal, government affairs, program management, and suppliers to integrate cybersecurity requirements throughout vehicle development. Manages and develops a cybersecurity GRC team, establishes KPIs, oversees workforce planning, and reports compliance risks and remediation progress to senior leadership.

Lead and execute adversary emulation and purple team operations to validate detections, logging, and response. Build repeatable MSV-based validation workflows, develop custom offensive tooling (C2, payloads, automation), test cloud and endpoint attack paths (AWS, GCP, Azure), and partner with Detection Engineering and Incident Response to convert findings into improved detections, documentation, and hunts.

Lead a team of product cybersecurity engineers to define secure engineering services, tools, and guardrails. Partner with product teams to mature SAST/DAST/fuzzing, runtime and OS hardening, embed security into SDLC workflows, provide technical guidance, and scale secure software and systems across GM products.

Lead triage and investigation of product security reports across vehicle, mobile, API, and backend software. Assess exploitability, impact, and risk; recommend severity and remediation. Coordinate with engineering, product, SOC, bug bounty, legal, and PSOC to validate fixes, improve PSIRT playbooks, and enhance tooling and reporting.

Lead advanced cyber investigations and detection engineering across endpoint, network, cloud, identity, application, and manufacturing environments. Develop and tune detections in SIEM/EDR/NDR/SOAR, conduct threat hunting, apply MITRE ATT&CK, automate workflows with scripting/AI, mentor analysts, and collaborate across security teams to improve detection fidelity and response.

Design, build, and evolve product security validation platforms, pipelines, and test frameworks. Develop automated test capabilities, scripts, and services to scale security validation. Implement AI-driven robustness and fuzz testing, create reusable security test cases, and integrate tests with CI/CD and product workflows to improve coverage, reliability, and efficiency.

Monitor, triage, and analyze threat activity and vulnerabilities across IT, OT, and connected-vehicle environments. Produce actionable intelligence products, maintain and enrich IOCs and actor profiles, operationalize intelligence into detection tooling (MISP, SIEM, EDR/NDR), support incident response and executive RFIs, map adversary TTPs to MITRE ATT&CK, and improve CTI processes and automation.

Lead offensive security assessments across embedded vehicle software, mobile, and backend systems. Perform penetration tests, red-team activities, and vulnerability research; validate impacts and develop exploits; provide actionable remediation guidance; partner with engineering teams to improve secure SDLC and advance offensive tooling and testing methods.

Senior individual contributor who designs and builds secure engineering services, implements SAST/DAST/fuzzing/runtime/OS hardening, conducts secure code reviews, authors reusable security patterns, partners with product teams, mentors engineers, and builds custom security tooling to scale secure software and systems across embedded, mobile, and backend products.

Lead security enablement and automation for enterprise application onboarding. Design authentication/authorization patterns (SAML, OAuth2, OIDC), build automation, reusable tools/APIs, and self-service workflows. Partner with application and product teams to ensure secure integrations, perform risk assessments, enforce compliance, and mentor junior engineers.