Senior SaaS & AI Cyber Security Engineer

General Motors Company; Warren (MI); Hybrid; USD 140,000 - 190,000; Full time

Job summary

General Motors Company is seeking a Senior SaaS & AI Security Engineer to strengthen cloud-based applications and AI capabilities. The role spans identity, data protection, and risk management across SaaS and AI domains.

You will lead security program development, advise on architecture, and mentor junior engineers while partnering with legal, privacy, and product teams to ensure responsible AI adoption.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, or a related field.
• Minimum of 7 years in cybersecurity with a focus on SaaS security and AI-driven solutions.
• Strong understanding of cybersecurity principles, protocols, and best practices.
• Experience with SaaS security concepts including identity federation, access governance, API and OAuth security, logging, and data protection.
• Working knowledge of AI/ML security risks and assessing AI-enabled applications and services.
• Experience with security architecture reviews, risk assessment, or security control validation.
• Experience designing, building, and securing AI agents.
• Ability to write clear technical requirements, security standards, findings, and executive-ready risk summaries.
• Excellent communication, analytical, and problem-solving skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Responsibilities

• Develop and mature the SaaS security program, including baselines and monitoring.
• Assess SaaS platforms for identity, access, data protection, logging, privacy, resilience, and risk.
• Partner with owners to strengthen SSO, MFA, privileged access, OAuth and lifecycle controls.
• Identify risks from misconfiguration, excessive permissions, shadow SaaS, data exposure.
• Support security architecture reviews, control design, remediation tracking for SaaS solutions.
• Automate repetitive assessment and remediation workflows where possible.
• Develop AI agents and drive auto-remediation with the business.
• Communicate risk clearly to technical and non-technical stakeholders.
• Contribute to standards, playbooks, reference architectures, training, and security awareness.
• Stay updated on threats, vulnerabilities in automotive and AI domains.
• Provide mentorship to junior security engineers.

Skills

SaaS security

AI security

Identity federation

OAuth security

Security architecture reviews

Risk assessment

AI agents design

Executive risk summaries

Communication skills

Independent & collaborative work

Education

Bachelor's or Master's in CS / Cybersecurity / Engineering

Job description

Hybrid: This role is categorized as hybrid. This means the successful candidate is expected to report to Warren, MI three times per week.

Job Description

The Role

General Motors is seeking a Senior SaaS & AI Security Engineer to strengthen the security of our cloud-based business applications and emerging artificial intelligence capabilities. This role will operate at the intersection of SaaS security, identity, data protection, and AI risk management.

What You'll Do

SaaS security

• Develop and mature the SaaS security program, including application inventory, security baselines, configuration standards, and continuous control monitoring.
• Assess SaaS platforms and integrations for identity, access, data protection, logging, privacy, resilience, and third-party risk.
• Partner with application owners to strengthen SSO, MFA, privileged access, service accounts, OAuth applications, and lifecycle controls.
• Identify and reduce risks associated with misconfiguration, excessive permissions, unmanaged integrations, shadow SaaS, data exposure, and insecure administrative practices.
• Support security architecture reviews, control design, exception management, and remediation tracking for SaaS solutions.
• Automate repetitive assessment, monitoring, evidence collection, and remediation workflows where appropriate.
• Develop custom AI agents and partner with the business to advance auto-remediation efforts.
• Communicate risk clearly to technical and non-technical stakeholders, including concise recommendations, tradeoffs, and decision points.
• Contribute to standards, playbooks, reference architectures, training, and security awareness for SaaS and AI users and builders.
• Stay abreast of the latest cybersecurity threats, vulnerabilities, and technological advancements, particularly in the automotive and AI domains.
• Provide mentorship and guidance to junior security engineers.

AI security

• Develop and implement security controls that enable and govern sanctioned AI usage, including approved tools, users, data types, integrations, access paths, monitoring, and policy enforcement.
• Maintain visibility into approved AI use cases, models, providers, data flows, agents, tools, plugins, and associated business owners.
• Develop repeatable security review patterns for AI products.
• Partner with legal, privacy, compliance, procurement, data governance, and product teams to support responsible and secure AI adoption.
• Track the evolving AI threat landscape and convert relevant findings into actionable control improvements, detections, and engineering guidance.

Your Skills & Abilities (Required Qualifications)

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, or a related field.
• Minimum of 7 years of experience in cybersecurity, with a significant focus on SaaS security and AI-driven security solutions.
• Strong understanding of cybersecurity principles, protocols, and best practices.
• Demonstrated experience with SaaS security concepts, including identity federation, access governance, API and OAuth security, configuration assessment, logging, and data protection.
• Working knowledge of AI/ML security risks and the ability to assess AI-enabled applications, workflows, or third-party services.
• Experience with security architecture reviews, risk assessment, or security control validation.
• Experience designing, building, and securing AI agents.
• Ability to write clear technical requirements, security standards, findings, and executive-ready risk summaries.
• Excellent communication, analytical, and problem-solving skills.
• Ability to work independently and collaboratively in a fast-paced environment.

What Will Give You A Competitive Edge (Preferred Qualifications)

• Certifications such as CISSP or equivalent are highly desirable.
• Familiarity with AI security standards and guidance, such as NIST AI Risk Management Framework, OWASP Top 10 for LLM Applications, MITRE ATLAS, or comparable practices.
• Experience using security data analysis, data engineering, dashboards, or analytics to identify trends, prioritize risk, measure control effectiveness, and support security operations decisions.

Additional Information:

Relocation is not available for this role.

GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future. This includes direct company sponsorship, entry of GM as the immigration employer of record on a government form, and any work authorization