Senior Product Cybersecurity Engineer – Secure Product Architecture

Jobtailor; Missouri; On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor is seeking an experienced security design professional focused on in-vehicle communications security. You will own security design and translate threat assessments into actionable technical requirements for engineering and supplier teams.

The role requires leadership in security design reviews across multiple teams and suppliers, keeping specifications aligned with software-defined vehicle timelines. You will drive security early in development and scale through self-service references.

Qualifications

• 6+ years of experience in product, embedded, or vehicle cybersecurity.
• Ownership of security design and requirements for internal teams and suppliers.
• Strong knowledge of in-vehicle security, including message authentication and Ethernet.
• Experience translating threat assessments into technical requirements.

Responsibilities

• Own and evolve security design and requirements for engineering and supplier teams.
• Translate threat assessments and architectural decisions into clear, testable security requirements for engineering and supplier teams.
• Lead and support security design and implementation reviews across internal teams and suppliers.
• Keep security design and specifications current with software-defined vehicle delivery timelines and platform changes.
• Collaborate with engineers to build security early in the development process.

Skills

Collaboration

Leadership

Problem-Solving

Education

Bachelor’s or Master’s in Computer Science / Computer Engineering / Electrical Engineering / Cybersecurity

Tools

C

C++

Java

AUTOSAR SecOC

FVM

SOME/IP

DoIP

TLS

CAN

CAN-FD

UDS (ISO 14229)

Job description

• Own and evolve security design for in-vehicle communications, including message authentication (SecOC), in-vehicle firewalls, and in-vehicle Ethernet security
• Translate threat assessments and architectural decisions into clear, testable security requirements for engineering and supplier teams
• Right-size requirements against supplier and platform capability, adjusting scope when requirements are not achievable
• Lead and support security design and implementation reviews across internal teams and suppliers
• Keep security design and specifications current with software-defined vehicle delivery timelines and platform changes
• Serve as a subject-matter expert for in-vehicle communications security
• Build self-service references so the broader team can scale
• Drive requirements and blocked items to closure
• Balance security rigor against supplier capability and vehicle program timing
• Collaborate with engineers to build security early in the development process

Requirements

• 6+ years of experience in product, embedded, or vehicle cybersecurity, with hands-on ownership of security design and requirements
• Strong working knowledge of in-vehicle communications security, including message authentication, firewalls, and automotive Ethernet
• Solid understanding of embedded security principles, including secure communication, key and certificate lifecycle management, replay/freshness protection, and secure provisioning
• Experience owning security design and translating it into technical requirements and specifications for internal teams and suppliers across the development lifecycle
• Demonstrated ability to lead security design and implementation reviews and align stakeholders across engineering, validation, and supplier teams
• Bachelor’s or master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or equivalent practical experience
• GM does not provide immigration-related sponsorship; candidates must not require GM immigration sponsorship now or in the future, including H1-B, OPT, STEM OPT, CPT, TN, J-1, or other immigration support
• Preferred: experience with software-defined vehicle architectures and service-based in-vehicle communication
• Preferred: experience across supplier-delivered ECU, firewall, and secure firmware ecosystems
• Preferred: experience with AUTOSAR SecOC, FVM, Automotive Ethernet (SOME/IP, DoIP, TLS), CAN/CAN-FD, and UDS (ISO 14229) security services
• Preferred: embedded development experience with C, C++, Java, or Python
• Preferred: automotive industry or similarly complex, deadline-driven, regulated-field experience
• Preferred: familiarity with TARA and translating threat outputs into security requirements

Core Competencies

Demonstrates expertise in in-vehicle communications security, including message authentication, firewalls, and automotive Ethernet, while effectively translating security design into actionable requirements for engineering and supplier teams. Proven ability to lead security design reviews and align stakeholders across various teams in a complex, regulated environment.

Highest-signal resume keywords

• In-Vehicle Communications Security
• Security Design Ownership
• Embedded Security Principles
• Technical Requirements Translation
• Stakeholder Alignment

Hard Skills

• Message Authentication
• In-Vehicle Firewalls
• Automotive Ethernet
• Secure Communication
• Key and Certificate Lifecycle Management
• Replay/Freshness Protection
• Secure Provisioning
• C
• C++
• Java

Soft Skills

• Collaboration
• Leadership
• Problem-Solving

Industry Keywords

• Cybersecurity
• Automotive Industry
• Embedded Development
• Software-Defined Vehicle Architectures
• Supplier-Delivered ECU

Tools & Technologies

• AUTOSAR SecOC
• FVM
• SOME/IP
• DoIP
• TLS
• CAN
• CAN-FD
• UDS (ISO 14229)