Senior Product Security & Incident Response Engineer

General Motors LLC

Dearborn (MI)

Hybrid

USD 140,000 - 180,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

General Motors is seeking a Senior Product Cybersecurity Engineer within the Product Security Incident Response Team (PSIRT) to lead triage, risk analysis, and remediation of product security vulnerabilities across GM’s portfolio. You will investigate reports from vehicle, mobile, API, and backend software, assessing exploitability and impact.

You will partner with engineering and product teams to plan remediation, validate fixes, and improve PSIRT processes.

Qualifications

6+ years of direct experience in product security, security engineering, and/or incident response.
Hands-on experience analyzing software, firmware, or system vulnerabilities and exploitability.
Familiarity with CVEs/CVSS, vulnerability classes, and coordinated disclosure practices.
Able to read and write software in multiple languages for analysis and remediation guidance.
Experience working with engineering and product teams to drive timely remediation.
Strong written and verbal communication skills for technical and non-technical audiences.

Responsibilities

Investigate and triage product security reports across vehicle, mobile, API, and backend software
Analyze exploitability, customer impact, and risk, and recommend severity and treatment
Partner with product and engineering teams on remediation plans, timelines, and validation
Validate fixes and mitigations to ensure vulnerabilities are resolved with sufficient quality
Contribute to PSIRT processes, playbooks, and tooling to improve consistency and response speed
Work as part of PSOC and closely with SOC, bug bounty, disclosure, and legal on product incidents