Senior Offensive Product Security Engineer

General Motors Company; Seattle (WA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

General Motors is seeking a Senior Product Cybersecurity Engineer focused on offensive product security to strengthen security across our software and vehicle-related systems. The role sits within the Product Cybersecurity organization and emphasizes penetration testing, security research, and risk-based remediation.

In a hybrid capacity, you will work with product teams to assess attack paths, validate risk, and deliver actionable findings that help mature our secure SDLC across embedded,

Qualifications

• 6+ years of experience in penetration testing, product security, security research, or similar roles.
• Experience with offensive security testing across applications, software, and systems.
• Experience with penetration testing, security assessments, vulnerability research, or exploit validation.
• Working knowledge of embedded security, operating system security, application security, and networking.
• Able to read and write software in one or more programming languages to support investigation and tooling.
• Strong ability to communicate technical findings and work with engineers on remediation.

Responsibilities

• Perform penetration testing and security assessments across software, systems, and product environments.
• Conduct security research that targets meaningful product and technology risks.
• Support offensive assessments across embedded, mobile, and backend environments.
• Identify vulnerabilities, validate impact, and provide clear remediation guidance.
• Partner with engineering teams to improve security through practical technical findings.
• Contribute to the improvement of offensive methods, tooling, and testing approaches across the portfolio.

Skills

Penetration testing

Security research

Offensive security

Embedded security

Programming

Communication

Job description

General Motors is seeking a Senior Product Cybersecurity Engineer focused on offensive product security to strengthen security across our software and vehicle-related systems. The role sits within the Product Cybersecurity organization and emphasizes penetration testing, security research, and risk-based remediation.

In a hybrid capacity, you will work with product teams to assess attack paths, validate risk, and deliver actionable findings that help mature our secure SDLC across embedded,