Staff Product Cybersecurity Engineer - Secure Product Engineering

Senior individual-contributor role within the Secure Product Engineering pillar of GM’s Product Cybersecurity organization. Partner hands-on with product engineering teams to ensure secure implementation of software and systems during the build phase.

Responsibilities

• Serve as a hands-on technical leader across secure software and systems engineering, driving outcomes through direct execution and influence rather than direct reports
• Personally design, build, and mature a robust set of secure engineering services and capabilities for GM products
• Establish close, embedded partnerships with product engineering teams to support and directly contribute to secure implementation
• Implement and mature SAST, DAST, fuzzing, runtime security, and OS security hardening of core code bases
• Author technical guidance, reusable patterns, and guardrails, and roll them out across product environments
• Perform in-depth secure code review and partner with adjacent teams to improve tooling and carry security requirements into engineering
• Mentor and uplevel engineers across the pillar, setting a high technical bar through example and pairing

Requirements

• 8+ years of cybersecurity experience with roles in application security, product security, or similar
• Demonstrated technical leadership and influence in relevant security or engineering-focused roles—leading initiatives without formal authority, mentoring engineers, and setting technical direction
• Expertise with application security, secure software engineering, and practical technical guidance
• Experience with SAST, DAST, fuzzing, code review, and secure SDLC workflows across platforms
• Able to read and write software in multiple programming languages to personally build tooling and support the team’s execution
• Works closely with engineering teams to materially improve security without unnecessary friction

Preferred Qualifications

• Prior role(s) in the automotive industry or a similarly complex, deadline-driven, and regulated field
• Published cybersecurity research projects (e.g. conference talks, blog posts, code repositories)
• Familiarity with embedded software/OS security, mobile applications, and backend development
• Have previously built custom security tooling and/or extended functionality in related technologies

Skills

• High-ownership, hands-on style with strong product instincts and a pragmatic security mindset
• Commitment to internal customer partnership and technically credible security support
• Deep technical expertise that enables clear guidance, strong mentorship, and opinionated technical planning
• Ability to manage multiple complex priorities with clear milestones and measurable outcomes
• Bias toward scalable improvement that strengthens Secure Product Engineering over time

Schedule

Hybrid—report to a specific location at least 3 times a week (or other frequency dictated by manager).

Benefits

From day one, GM supports well-being at work and at home. Eligible for relocation benefits.