Head of Secure Dev & Application Security - Hybrid

General Motors; Warren (MI); Hybrid; USD 140,000 - 210,000; Full time

Job summary

General Motors is seeking a leader to head Secure Development & Application Security, embedding preventive and detective controls across engineering. You will translate strategy into direction, set priorities, and own performance in a high-impact cybersecurity function.

You will build scalable security services, partner with engineering, and drive measurable risk reduction while enabling timely software delivery across GM’s modern software environments.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, IT, Engineering, or related field.
• 5+ years of cybersecurity, application security, or secure software development.
• 3+ years leading people, including hiring and performance management.
• 3+ years leading or scaling application security domains such as static/dynamic testing, API security, AI security, or runtime protection.
• Experience embedding security controls into software delivery workflows and pipelines.
• Strong ownership of metrics and cross-functional collaboration.

Responsibilities

• Lead the Secure Development & Application Security function with strategy, priorities, and resources.
• Define roadmaps for security controls embedded in engineering workflows.
• Own functional performance through metrics, prioritizing investments and reducing risk.
• Partner with engineering and platform teams to integrate controls into pipelines and release processes.
• Guide leaders and teams through complex decisions and remove blockers.
• Foster cross-functional relationships for policy, tooling, detection, and governance.

Skills

Leadership

Cybersecurity

Software security

API security

Threat modeling

CI/CD pipelines

Cloud-native

Education

Bachelor's degree in CS/Cybersecurity/IT/Engineering

Master’s degree (preferred)

Job description

General Motors is seeking a leader to head Secure Development & Application Security, embedding preventive and detective controls across engineering. You will translate strategy into direction, set priorities, and own performance in a high-impact cybersecurity function.

You will build scalable security services, partner with engineering, and drive measurable risk reduction while enabling timely software delivery across GM’s modern software environments.