Senior Product Security Engineer, PSIRT Response Lead

General Motors; Warren (MI); Hybrid; USD 110,000 - 150,000; Full time

Job summary

General Motors seeks a Senior Product Cybersecurity Engineer to lead triage and remediation of vulnerabilities across GM’s vehicle, mobile, API and backend software. You will investigate reports, assess risk, and guide engineering teams on timely fixes and verifications.

The role emphasizes collaboration with PSIRT, PSOC, and legal teams, and requires hands‑on vulnerability analysis, strong communication, and experience with CVEs/CVSS. This hybrid position supports relocation benefits.

Qualifications

• 6+ years of direct experience in product security, security engineering, and/or incident response.
• Hands-on experience analyzing software, firmware, or system vulnerabilities and exploitability.
• Familiarity with common vulnerability classes, CVEs/CVSS, and coordinated disclosure practices.
• Able to read and write software in multiple languages for analysis and remediation guidance.
• Experience working with engineering and product teams to drive timely, effective remediation.
• Strong written and verbal communication skills for technical and non-technical audiences.

Responsibilities

• Investigate and triage product security reports across vehicle, mobile, API, and backend software
• Analyze exploitability, customer impact, and risk, and recommend severity and treatment
• Partner with product and engineering teams on remediation plans, timelines, and validation
• Validate fixes and mitigations to ensure vulnerabilities are resolved with sufficient quality
• Contribute to PSIRT processes, playbooks, and tooling to improve consistency and response speed
• Work as part of PSOC and closely with SOC, bug bounty, disclosure, and legal on product incidents

Skills

6+ years experience

Vulnerability analysis

CVEs/CVSS familiarity

Multilingual code reading

Cross‑functional collaboration

Strong communication

Job description

General Motors seeks a Senior Product Cybersecurity Engineer to lead triage and remediation of vulnerabilities across GM’s vehicle, mobile, API and backend software. You will investigate reports, assess risk, and guide engineering teams on timely fixes and verifications.

The role emphasizes collaboration with PSIRT, PSOC, and legal teams, and requires hands‑on vulnerability analysis, strong communication, and experience with CVEs/CVSS. This hybrid position supports relocation benefits.