Senior Product Cybersecurity Engineer – Secure Product Architecture

Descripción

The Role

The Senior Product Cybersecurity Engineer role sits within the broader Product Cybersecurity organization at General Motors and focuses on protecting in-vehicle systems, their trust boundaries, and access to vehicle functions. This engineer acts as a security design owner for in-vehicle security, including gateway security as well as secure diagnostics, unlock, and firewall capabilities, across current and next-generation software-defined vehicle platforms.

What You’ll D o

• Own and evolve the security design for secure diagnostics, secure unlock, in-vehicle private networks, gateways, and firewall capabilities.
• Translate threat assessments and architectural decisions into clear, testable security requirements for vehicle systems, platforms, and supplier-delivered components.
• Define and maintain security policies that control diagnostic access, communication paths, trust boundaries, and traffic between in-vehicle domains.
• Develop, maintain, and mature in-vehicle firewall and gateway policies as vehicle architectures, services, and delivery requirements evolve.
• Partner with engineering, architecture, validation, service, and supplier teams to ensure security controls and policies are implemented correctly.
• Lead and support security design, policy, and implementation reviews across internal teams and suppliers.
• Identify gaps, assess risk, and drive practical improvements to diagnostic access, secure unlock, gateway security, and firewall policy enforcement.
• Keep security requirements, design decisions, and policy artifacts current with software-defined vehicle delivery timelines and platform changes.
• Serve as a subject-matter expert for secure diagnostics and in-vehicle security, and build self-service references that help the broader team scale.

Your Skills & Abilities (Required Qualifications )

• 6+ years of experience in product, embedded, vehicle, or automotive cybersecurity, with hands-on ownership of security design, requirements, or policy development.
• Strong working knowledge of secure diagnostics, secure vehicle access, in-vehicle security, gateways, and firewalls.
• Solid understanding of embedded security principles, including authentication, authorization, access control, secure communication, and protection of sensitive vehicle functions.
• Experience translating threat assessments and architectural decisions into technical security requirements and policies for internal engineering teams and suppliers.
• Experience owning or maintaining security policies and requirements across the development lifecycle.
• Demonstrated ability to lead security design and implementation reviews and align stakeholders across engineering, validation, service, architecture, and supplier teams.
• Strong communication and technical documentation skills, with the ability to explain complex security concepts to both cybersecurity and non-cybersecurity audiences.
• Bachelor’s or master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or equivalent practical experience.

What Will Give You A Competitive Edge (Preferred Qualifications )

• Experience with software-defined vehicle architectures and evolving in-vehicle system designs.
• Experience working across supplier-delivered electronic control units, gateways, firewall platforms, diagnostic systems, and secure firmware ecosystems.
• Experience defining or managing firewall policies, gateway security policies, and communication security requirements.
• Prior embedded development, systems engineering, or vehicle engineering experience.
• Prior role or experience in the automotive industry or a similarly complex, deadline-driven, and regulated field.
• Familiarity with threat assessment processes and translating threat outputs into security requirements, implementation guidance, and validation objectives.
• Experience balancing security rigor with platform capability, supplier constraints, and vehicle program timing.

What You’ll Bring

• Deep ownership instinct — you drive requirements, policy gaps, and blocked items to closure rather than waiting for others.
• A pragmatic approach that balances security rigor against real platform capability, supplier readiness, and vehicle program timing.
• Clear technical judgment on risk, access control, trust boundaries, and how security requirements should be specified and implemented.
• Strong communication skills and a habit of packaging knowledge so teams can scale without depending on a single expert.
• A collaborative mindset that helps engineering and supplier teams build secure vehicle capabilities early rather than reviewing from the outside.
• Curiosity and adaptability as vehicle architectures, services, and cybersecurity expectations continue to evolve.

#LI-SB3

GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future. This includes direct company sponsorship, entry of GM as the immigration employer of record on a government form, and any work authorization requiring a written submission or other immigration support from the company (e.g., H1-B, OPT, STEM OPT, CPT, TN, J-1, etc.)

Este puesto se clasifica como híbrido. Esto significa que se espera que el candidato seleccionado se presente en una ubicación específica al menos 3 veces por semana {o con otra frecuencia indicada por su líder}.

Los beneficios de reubicación están disponibles para los candidatos que califican según la política de la empresa.

Información sobre diversidad

General Motors se compromete a ser un lugar de trabajo en el cual no solo no haya discriminación indebida, sino que fomente con sinceridad la inclusión y el sentido de pertenencia. Creemos firmemente que la diversidad del personal crea un entorno en el cual nuestros empleados pueden prosperar y desarrollar mejores productos para nuestros clientes. Instamos a los candidatos interesados a que revisen las responsabilidades y aptitudes clave para cada puesto y se postulen para los puestos que coincidan con sus habilidades y capacidades. Es posible que, cuando corresponda, se les pida a los solicitantes que están en el proceso de contratación que completen satisfactoriamente una o más evaluaciones relacionadas con su función y/o una evaluación previa al empleo antes de comenzar a trabajar.  Para obtener más información, visite Cómo contratamos.

Declaración de igualdad de oportunidades en el empleo (EE.UU.)

General Motors se enorgullece de ser un empleador que ofrece igualdad de oportunidades.  Todos los solicitantes calificados serán tenidos en cuenta para el empleo sin distinción de raza, color, religión, sexo, orientación sexual, identidad de género, nacionalidad, discapacidad o condición de veterano protegido. 

Adecuaciones (EE.UU. y Canadá)

General Motors ofrece oportunidades a todos los solicitantes de empleo, incluyendo las personas con discapacidades. Si necesita una adecuación razonable para ayudarle con su búsqueda o solicitud de empleo, envíenos un correo electrónico a [email protected] o llámenos al 800-865-7580. En su correo electrónico, incluya una descripción del puesto específico que está solicitando, así como el título del empleo y el número de solicitud del puesto que está solicitando.