Staff Product Cybersecurity Engineer, Offensive Security

General Motors; Warren (MI); Hybrid; USD 140,000 - 180,000; Full time

Job summary

General Motors is seeking a Staff Product Cybersecurity Engineer focused on offensive product security. You will perform penetration testing across embedded vehicle software, mobile experiences, and backend services, and translate findings into actionable remediation aligned with secure SDLC practices.

Join a collaborative team that partners with engineering to identify attack paths, validate risk, and strengthen security controls while enabling innovation in a high‑assurance product portfolio.

Qualifications

• 8+ years in penetration testing, product security, or security research.
• Deep expertise across applications, software, and systems offensive testing.
• Experience with penetration testing, red-team activities, and exploit validation.
• Familiarity with embedded security, OS security, networking.
• Ability to read and write software to support investigations and tooling.
• Strong communication of findings to engineers for remediation.

Responsibilities

• Perform penetration testing across software, systems, and product environments
• Conduct security research that targets meaningful product and technology risks
• Execute offensive assessments across embedded, mobile, and backend environments
• Identify vulnerabilities, validate impact, and provide clear remediation guidance
• Partner with engineering teams to improve security through practical technical findings
• Help strengthen offensive methods, tooling, and testing approaches across the portfolio

Skills

Penetration testing

Offensive security

Security research

Embedded systems

Software development

Technical communication

Tools

Custom offensive tooling

Security testing tooling

Job description

General Motors is seeking a Staff Product Cybersecurity Engineer focused on offensive product security. You will perform penetration testing across embedded vehicle software, mobile experiences, and backend services, and translate findings into actionable remediation aligned with secure SDLC practices.

Join a collaborative team that partners with engineering to identify attack paths, validate risk, and strengthen security controls while enabling innovation in a high‑assurance product portfolio.