Staff Offensive Product Security Engineer (Hybrid)

General Motors; Milford Charter Township (MI); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation benefits

Job summary

General Motors is seeking a Staff Product Cybersecurity Engineer in a hybrid role based in Milford, MI or Warren, MI. You will lead offensive security engagements, perform penetration testing across vehicle software, embedded systems, and product services, and guide remediation with engineering teams.

The role requires 8+ years in security testing, red-team activity, and vulnerability research, with strong programming literacy and clear communication skills for technical findings.

Qualifications

• 8+ years of experience in penetration testing, product security, security research, or similar roles.
• Deep expertise in offensive security testing across applications, software, and systems.
• Experience with penetration testing, red-team activity, vulnerability research, and exploit validation.
• Familiarity with embedded security, operating system security, application security, and networking.
• Able to read-and-write software in a variety of languages to support investigation and tooling.
• Strong ability to communicate technical findings and work directly with engineers on remediation.

Responsibilities

• Perform penetration testing across software, systems, and product environments.
• Conduct security research that targets meaningful product and technology risks.
• Execute offensive assessments across embedded, mobile, and backend environments.
• Identify vulnerabilities, validate impact, and provide clear remediation guidance.
• Partner with engineering teams to improve security through practical technical findings.
• Help strengthen offensive methods, tooling, and testing approaches across the portfolio.

Skills

Penetration testing

Security research

Exploit validation

Read/write code in multiple languages

Tools

Custom offensive tooling

Job description

General Motors is seeking a Staff Product Cybersecurity Engineer in a hybrid role based in Milford, MI or Warren, MI. You will lead offensive security engagements, perform penetration testing across vehicle software, embedded systems, and product services, and guide remediation with engineering teams.

The role requires 8+ years in security testing, red-team activity, and vulnerability research, with strong programming literacy and clear communication skills for technical findings.