Senior Product Security Engineer

General Motors; Warren (MI); Hybrid; USD 140,000 - 180,000; Full time

Job summary

General Motors seeks a Product Cybersecurity Engineer to join the Secure Product Engineering pillar. This senior individual contributor acts with technical credibility, building tooling and guardrails to scale secure engineering across GM’s product portfolio.

You will partner with engineering teams, contribute to secure implementations, and lead by example in secure coding practices and architecture reviews.

Qualifications

• 4+ years of cybersecurity experience in application or product security.
• Ability to guide security initiatives without formal authority and mentor engineers.
• Strong practical knowledge of secure software engineering and SDLC workflows.
• Experience with SAST, DAST, fuzzing, code reviews, and secure coding practices.
• Ability to read and write software in multiple languages to build tooling.
• Collaborates with engineering teams to reduce security friction and risk.

Responsibilities

• Serve as hands‑on contributor across secure software and systems engineering.
• Design, build, and mature secure engineering services for GM products.
• Partner with product engineering to secure implementations.
• Implement and mature SAST, DAST, fuzzing, runtime security, and OS hardening.
• Author guidance, patterns, and guardrails for broad rollout.
• Perform in‑depth secure code reviews and improve tooling.
• Mentor engineers to uphold a high technical bar.

Skills

Cybersecurity

Application security

Secure SDLC

SAST/DAST

Code review

Multi-language programming

Tools

SAST tooling

DAST tooling

Fuzzing tooling

OS security hardening

Job description

General Motors seeks a Product Cybersecurity Engineer to join the Secure Product Engineering pillar. This senior individual contributor acts with technical credibility, building tooling and guardrails to scale secure engineering across GM’s product portfolio.

You will partner with engineering teams, contribute to secure implementations, and lead by example in secure coding practices and architecture reviews.