Manager, Secure Development & Application Security

Descripción

At General Motors, software is central to how we build vehicles, platforms, and digital experiences. We are looking for a people leader to lead Secure Development & Application Security, a key Cybersecurity function focused on embedding preventative and detective security controls into engineering workflows before software reaches production.

This function includes areas such as static application security testing, dynamic application security testing, API security, AI security, and runtime resilience. This role is ideal for a leader who can help scale practical, developer-friendly security across modern software environments while improving risk reduction, coverage, and engineering partnership.

The Role

As Manager, Secure Development & Application Security, you will lead a distinct Cybersecurity function responsible for improving how secure software is designed, built, tested, and operated across GM. You will translate strategy into clear direction for teams, set priorities, allocate resources, and own the operational performance of the function. You will partner closely with engineering, platform, product, infrastructure, and other security teams to embed practical, developer-friendly controls that reduce risk without slowing delivery. You will help shape scalable security services and workflows that improve consistency across the software lifecycle. This is a high-impact leadership role for someone who can build strong teams, influence across organizations, and lead change through measurable outcomes.

What You’ll Do

• Lead the Secure Development & Application Security function, including team direction, operating model, workforce planning, and delivery against business priorities.
• Define and drive the roadmap for security controls embedded in engineering workflows, including static testing, dynamic testing, API security, AI security, and runtime resilience.
• Own functional performance through key metrics and service outcomes, using data to prioritize investments, improve coverage, and reduce application risk at scale.
• Partner with engineering and platform teams to integrate security controls into development pipelines and release processes in ways that are effective, reliable, and usable.
• Guide leaders and team members through complex technical and operational decisions, removing roadblocks and enabling consistent execution across multiple teams.
• Build strong cross-functional relationships to align policy, tooling, detection, remediation, and governance across the software development lifecycle.
• Develop talent, strengthen succession pipelines, and lead organizational change that improves team capability, accountability, and impact.

Your Skills & Abilities (Required Qualifications)

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
• 5+ years of experience in cybersecurity, application security, software engineering security, or secure software development.
• 3+ years of experience leading people, including hiring, coaching, performance management, and team development.
• 3+ years of experience leading or scaling one or more application security domains such as static testing, dynamic testing, API security, AI security, threat modeling, or runtime protection.
• Experience partnering with engineering and product organizations to embed security controls into software delivery workflows, developer tools, and release processes.
• Experience owning operational goals, metrics, or key performance indicators and using them to drive prioritization, execution, and continuous improvement.
• Working knowledge of modern software architectures and delivery environments, including cloud-native applications, APIs, containers, continuous integration and delivery pipelines, and developer tooling.
• Demonstrated ability to make independent decisions on significant matters, influence across functions, and lead teams through change in a complex enterprise environment.

What Will Give You A Competitive Edge (Preferred Qualifications)

• Master’s degree in a relevant field.
• 8+ years of experience in cybersecurity or software security, including enterprise-scale application security leadership.
• Experience building or maturing secure development programs in large, highly distributed engineering environments.
• Experience with developer-friendly security practices such as security automation, policy as code, self-service enablement, and risk-based remediation.
• Familiarity with regulated environments, third-party software risk, and secure-by-design approaches across the software lifecycle.
• Relevant industry certifications such as CISSP, CSSLP, GIAC, or cloud security certifications.
• Experience in automotive, mobility, manufacturing, or other large-scale product and technology organizations.

GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future. This includes direct company sponsorship, entry of GM as the immigration employer of record on a government form, and any work authorization requiring a written submission or other immigration support from the company (e.g., H1-B, OPT, STEM OPT, CPT, TN, J-1, etc.)

Este puesto se clasifica como híbrido. Esto significa que se espera que el candidato seleccionado se presente en una ubicación específica al menos 3 veces por semana {o con otra frecuencia indicada por su líder}.

Este puesto podría ser elegible para beneficios de relocalización.

Información sobre diversidad

General Motors se compromete a ser un lugar de trabajo en el cual no solo no haya discriminación indebida, sino que fomente con sinceridad la inclusión y el sentido de pertenencia. Creemos firmemente que la diversidad del personal crea un entorno en el cual nuestros empleados pueden prosperar y desarrollar mejores productos para nuestros clientes. Instamos a los candidatos interesados a que revisen las responsabilidades y aptitudes clave para cada puesto y se postulen para los puestos que coincidan con sus habilidades y capacidades. Es posible que, cuando corresponda, se les pida a los solicitantes que están en el proceso de contratación que completen satisfactoriamente una o más evaluaciones relacionadas con su función y/o una evaluación previa al empleo antes de comenzar a trabajar.  Para obtener más información, visite Cómo contratamos.

Declaración de igualdad de oportunidades en el empleo (EE.UU.)

General Motors se enorgullece de ser un empleador que ofrece igualdad de oportunidades.  Todos los solicitantes calificados serán tenidos en cuenta para el empleo sin distinción de raza, color, religión, sexo, orientación sexual, identidad de género, nacionalidad, discapacidad o condición de veterano protegido. 

Adecuaciones (EE.UU. y Canadá)

General Motors ofrece oportunidades a todos los solicitantes de empleo, incluyendo las personas con discapacidades. Si necesita una adecuación razonable para ayudarle con su búsqueda o solicitud de empleo, envíenos un correo electrónico a [email protected] o llámenos al 800-865-7580. En su correo electrónico, incluya una descripción del puesto específico que está solicitando, así como el título del empleo y el número de solicitud del puesto que está solicitando.