Information Security Graduate Placement

GM Performance Power Units•Concord, NC

1d•Onsite

About The Position

GM Performance Power Units (GMPPU) is seeking a motivated and curious Information Security Graduate Placement student for an onsite role in Concord, North Carolina. The placement runs from Summer 2027 to Summer 2028 and provides hands-on experience supporting cybersecurity operations, risk management, security awareness, identity and access management, endpoint security, and cloud security initiatives. The student will work alongside experienced security and IT professionals, gaining exposure to real-world security challenges in a fast-paced engineering and manufacturing environment supporting high-performance motorsports operations. The placement is intended for students pursuing a degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering Technology, or a related field who want to build practical experience in enterprise security. The student may gain exposure to Microsoft Defender XDR, Microsoft Sentinel, Microsoft Intune, Microsoft Entra ID and Active Directory, vulnerability management, incident response, security awareness programs, third-party risk management, security governance and policy development, and manufacturing and engineering security considerations. Additional tasks may be assigned as needed. The role requires the ability to stand, walk, and move through diverse operational environments, including race shops, arenas, and commercial facilities, and comfort working in variable conditions that may be loud, high-traffic, or high-pressure. The position offers access to a competitive benefits package, including private healthcare, a 401(k) plan with company match, employer-paid life insurance and disability coverage, 32 days of annual leave including holidays, financial advisor access, Employee Assistance Programs, subsidized onsite dining, an onsite gym, and free onsite EV charging for personal GM vehicles.

Requirements

Currently pursuing a bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering Technology, or a related technical field.
Basic understanding of networking fundamentals, Windows and Linux operating systems, identity and access management concepts, and cybersecurity principles and best practices.
Strong written and verbal communication skills.
Ability to learn quickly and work both independently and collaboratively.
Demonstrated curiosity and enthusiasm for cybersecurity.
Ability to handle multiple projects independently.

Nice To Haves

Experience with PowerShell, Python, or other scripting languages.
Experience with Microsoft and Amazon cloud technologies.
Interest in industrial cybersecurity, manufacturing technology, or engineering environments.
Familiarity with multi-factor authentication, vulnerability management, endpoint security, security monitoring, or identity management.
Participation in cybersecurity competitions, home labs, security clubs, or personal projects.
Relevant coursework or certifications such as Security+, Network+, AWS Security Specialty, SC-900, or AZ-900.

Responsibilities

Support security monitoring and investigation activities using Microsoft security technologies.
Review security alerts and help document findings.
Assist with vulnerability management activities and remediation tracking.
Support identity and access reviews within Microsoft 365 and Entra ID.
Help maintain security documentation, procedures, and standards.
Assist with phishing simulations and security awareness initiatives.
Research emerging cybersecurity threats and technologies.
Support endpoint security initiatives, including device compliance and security baseline reviews.
Assist with third-party vendor risk assessments and security questionnaires.
Help inventory and assess software, cloud services, and technology risks.
Participate in security projects and process improvement initiatives.
Create reports, dashboards, and presentations for security metrics and awareness efforts.
Perform additional tasks as needed.