Senior Cloud Security Engineer (AI & Sandbox Defense)

General Motors Company; Warren (MI); On-site; USD 140,000 - 210,000; Full time

Job summary

General Motors' Advanced Security Engineering team develops advanced security capabilities to help secure GM and reduce real security exposure. You will design, build, and operate the cloud services and AI agents that support this work, analyzing untrusted code and handling sensitive security data.

As a senior individual contributor, you will work independently with minimal guidance, own delivery across team boundaries, and mentor other engineers while shaping new security capabilities at GM.

Qualifications

• Bachelor's degree in CS, Cybersecurity, Engineering or equivalent experience.
• 5+ years of software, cloud, or security engineering.
• Strong production Python experience.
• Experience with IaC (Terraform) and CI/CD on major cloud.
• Knowledge of application security and vulnerability classes.
• Experience with least-privilege, secrets management and safe handling of untrusted input.
• Ability to drive work across teams and explain risks to non-security staff.
• Experience using agentic LLM tools.

Responsibilities

• Design, build, and operate production cloud services in Python.
• Integrate findings from security tools and cloud APIs; build AI agents to triage findings and propose fixes.
• Build and harden sandboxed environments for AI-enabled testing.
• Control agent access with least-privilege identities, secrets management, and isolation.
• Evaluate model accuracy, cost, and latency; explain trade-offs.
• Collaborate with security teams to turn expert judgment into repeatable checks and mentor engineers.

Skills

Production Python

Cloud engineering

Security engineering

Least privilege

Secrets management

LLM tools

Education

Bachelor's degree or equivalent

Tools

Terraform

CI/CD

Semgrep

CodeQL

Job description

General Motors' Advanced Security Engineering team develops advanced security capabilities to help secure GM and reduce real security exposure. You will design, build, and operate the cloud services and AI agents that support this work, analyzing untrusted code and handling sensitive security data.

As a senior individual contributor, you will work independently with minimal guidance, own delivery across team boundaries, and mentor other engineers while shaping new security capabilities at GM.