Staff Product Cybersecurity Engineer - Secure Product Engineering

About the Role

The Staff Product Cybersecurity Engineer, Secure Product Engineering, is a senior individual contributor within the Secure Product Engineering pillar of the broader Product Cybersecurity organization at General Motors. This role works closely with product engineering teams to ensure secure software and systems implementation during the build phase of development. As a technical leader without direct reports, the engineer builds tooling, patterns, and secure-engineering capabilities, providing technical guidance and workflows to scale secure software and systems engineering across GM's product portfolio, including embedded vehicle software, mobile experiences, and other key software & services.

Responsibilities

• Serve as a hands-on technical leader across secure software and systems engineering, driving outcomes through direct execution and influence.
• Personally design, build, and mature a robust set of secure engineering services and capabilities for GM products.
• Establish close partnerships with product engineering teams to support and contribute to secure implementation.
• Implement and mature SAST, DAST, fuzzing, runtime security, and OS security hardening of core code bases.
• Author technical guidance, reusable patterns, and guardrails, and roll them out across product environments.
• Perform in-depth secure code review and partner with adjacent teams to improve tooling and carry security requirements into engineering.
• Mentor and uplevel engineers across the pillar, setting a high technical bar through example and pairing.

Requirements

• 8+ years of cybersecurity experience in application security, product security, or similar roles.
• Demonstrated technical leadership and influence in security or engineering-focused roles, including leading initiatives without formal authority, mentoring engineers, and setting technical direction.
• Expertise in application security, secure software engineering, and practical technical guidance.
• Experience with SAST, DAST, fuzzing, code review, and secure SDLC workflows across platforms.
• Ability to read and write software in multiple programming languages to build tooling and support team execution.
• Proven ability to work closely with engineering teams to improve security without unnecessary friction.

Qualifications

• Prior experience in the automotive industry or a similarly complex, deadline-driven, and regulated field (preferred).
• Published cybersecurity research projects (e.g., conference talks, blog posts, code repositories) (preferred).
• Familiarity with embedded software/OS security, mobile applications, and backend development (preferred).
• Experience building custom security tooling and/or extending functionality in related technologies (preferred).

Skills

• High-ownership, hands-on style with strong product instincts and a pragmatic security mindset.
• Commitment to internal customer partnership and technically credible security support.
• Deep technical expertise enabling clear guidance, strong mentorship, and opinionated technical planning.
• Ability to manage multiple complex priorities with clear milestones and measurable outcomes.
• Bias toward scalable improvement that strengthens Secure Product Engineering over time.

This role is categorized as hybrid, requiring on-site presence at least 3 times a week. Relocation benefits may be available. GM does not provide immigration-related sponsorship for this position.