Senior Cybersecurity Engineer – Vulnerability Exposure Management

GM • Warren, MI

6d • Hybrid

About The Position

The Senior Cybersecurity Engineer serves as the senior technical contributor for Global Manufacturing and Operational Technology (OT) environments on GM’s Vulnerability Exposure Management team. The role leads the engineering and continuous improvement of the processes, data, scoring, tooling, and stakeholder workflows used to manage vulnerabilities across manufacturing and industrial environments. It translates cyber intelligence and technical findings into plant-aware remediation priorities that account for exploitability, asset criticality, production impact, safety, uptime, solution complexity, maintenance windows, network location, existing mitigations, and business risk.

The engineer works across cybersecurity operations and manufacturing disciplines, establishes technical credibility with plant stakeholders, and guides complex exposures from discovery through validated remediation. The role solves diverse, non-standard security problems, converts broad challenges into implementable initiatives, and drives delivery across teams through technical leadership, judgment, and influence. The position is categorized as hybrid, with reporting to a specific location at least three times a week or at another frequency set by the manager. Relocation benefits are available to candidates who qualify under company policy. GM does not provide immigration-related sponsorship for this role.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field, or equivalent practical experience.
• Experience in cybersecurity engineering, vulnerability management, security operations, manufacturing IT/OT and Industrial Control Systems (ICS), infrastructure security, or related domains.
• Working knowledge of PLCs, robots, HMIs, industrial automation, engineering workstations, and plant-floor systems.
• Experience in large-scale enterprise automotive or manufacturing operations.
• Experience evaluating third-party OEM software and firmware updates, and coordinating securely with external field engineering vendors.
• Knowledge of industrial networking and protocols, including IECN/PFCN environments, Industrial Ethernet, EtherNet/IP, DeviceNet, Profibus, or comparable technologies.
• Experience assessing and prioritizing vulnerabilities where patching may be constrained by safety, production, availability, vendor support, or maintenance windows.
• Understanding of CVSS, EPSS, CISA KEV, exploit maturity, active exploitation, attack paths, and risk-based prioritization beyond severity alone.
• Experience with remediation governance, exception management, dashboards, metrics, and executive reporting.
• Experience correlating vulnerability findings with business, asset, identity, telemetry, network, SBOM, and threat-intelligence context to support risk-based prioritization and exploitability-focused decision-making.
• Strong understanding of remediation governance, exception management, dashboarding, metrics, and continuous improvement within a mature vulnerability management program.
• Familiarity with enterprise and OT security platforms such as Armis, Claroty, Tenable, Qualys, and Dragos; strong understanding of network segmentation, VLANs, and port configurations in plant floors.
• Experience designing compensating controls and managing alternative mitigations when traditional immediate software patching is not possible because of plant uptime constraints.
• Ability to work independently, exercise strong judgment, and deliver results with minimal guidance.
• Ability to solve complex, ambiguous problems using structured analysis and innovative approaches.
• Strong communication and influence skills, including presenting recommendations supported by data and analysis.

Nice To Haves

• Ability to run an end-to-end vulnerability intelligence workflow for a high-profile CVE, from initial awareness through intelligence collection, environmental relevance scoping, contextual scoring, and tailored outputs for executive and technical stakeholders.
• Ability to assess exploitability when public information is incomplete by reasoning through attack complexity, required privileges, user interaction, environmental preconditions, and control-stack effectiveness, and update recommendations as proof-of-concept exploits and tooling emerge.
• Ability to respond to high-impact zero-day vulnerabilities in critical third-party products by validating noisy intelligence, scoping exposure, recommending interim mitigations, and structuring updates during the first 24 to 72 hours.
• Ability to reconcile conflicting vulnerability data across vendors, scanners, commercial feeds, and internal observations; document rationale; and establish a defensible environment-specific rating.
• Experience defining and using leadership metrics and dashboards that combine scanner, CMDB, ticketing, and threat-intelligence data to track remediation urgency, business exposure, and time to remediate.
• Knowledge of industrial cybersecurity frameworks, specifically ISA/IEC 62443 and NIST SP 800-82.
• Knowledge of leveraging the NIST Cybersecurity Framework (CSF 2.0) and CISA Cross-Sector Cybersecurity Performance Goals (CPGs) to govern, scorecard, and align technical vulnerabilities with enterprise risk metrics.

Responsibilities

• Lead and support the OT vulnerability and exposure management lifecycle for manufacturing IT/OT and Industrial Control Systems (ICS), protecting plant-floor operations while maintaining safe, reliable, and quality production.
• Correlate findings from OT discovery platforms, vulnerability scanners, CMDB, network data, plant context, threat intelligence, and remediation systems.
• Apply GM’s risk model and OT and manufacturing environmental variables to produce defensible ratings that reflect plant conditions.
• Evaluate how exploit impact, solution complexity, existing mitigations, segmentation, and operational constraints affect final GM risk priorities.
• Triage exposures using industrial-specific context, CVSS, EPSS, and CISA Known Exploited Vulnerabilities (KEV), accounting for operational constraints of legacy manufacturing hardware.
• Map each vulnerability to affected OT hardware or software, accountable owner, recommended solution, and target remediation date.
• Serve as the primary security liaison between manufacturing cybersecurity, plant IT teams, and floor automation engineers to drive risk-informed mitigation plans.
• Support rapid response to high-impact ICS vulnerabilities, actively exploited vulnerabilities, and emerging threats affecting GM manufacturing technologies.
• Establish KPIs tracking exposure reduction and remediation velocity, and translate technical plant-floor risk into executive-ready dashboards.
• Build and mature AI capabilities for ingestion and asset-context enrichment, advanced attack-path and risk prioritization, and remediation-workflow automation.
• Correlate scanner findings with asset, business, network, telemetry, identity, threat-intelligence, and SBOM context to improve prioritization accuracy and focus remediation on exposures most likely to create business risk.
• Apply threat intelligence and exploitability analytics, including exposure context, attack-path factors, and evidence of exploitation, to advance prioritization beyond severity-only scoring.
• Provide technical leadership, mentoring, and consultative support to less experienced engineers and aligned remediation owners.

Benefits

• Relocation benefits are available for candidates who qualify under company policy.
• GM provides employee well-being support at work and at home through its Total Rewards resources.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior