Senior Cybersecurity Engineer – Vulnerability Exposure Management

General Motors • Warren, MI

1d • Hybrid

About The Position

As a Senior Cybersecurity Vulnerability Engineer on GM’s Vulnerability Exposure Management team, you will serve as a senior technical contributor for Global Manufacturing and Operational Technology (OT) environments. You will lead the engineering and continuous improvement of processes, data, scoring, tooling, and stakeholder workflows for managing vulnerabilities across GM manufacturing and industrial environments. You will translate cyber intelligence and technical findings into plant-aware remediation priorities, accounting for exploitability, asset criticality, production impact, safety, uptime, solution complexity, maintenance windows, network location, existing mitigations, and business risk.

The role involves solving diverse, non-standard security problems, turning broad challenges into implementable initiatives, and driving delivery across teams through technical leadership, sound judgment, and influence. You will work across cybersecurity operations and manufacturing disciplines, establish credibility with plant stakeholders, and guide complex exposures from discovery through validated remediation. The role is hybrid, with the selected candidate expected to report to a specific location at least three times a week or as otherwise directed by their manager. Relocation benefits are available to candidates who qualify under company policy. GM does not provide immigration-related sponsorship for this role.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field, or equivalent practical experience.
• Experience in cybersecurity engineering, vulnerability management, security operations, manufacturing IT/OT and ICS, infrastructure security, or related domains.
• Working knowledge of PLCs, robots, HMIs, industrial automation, engineering workstations, and plant-floor systems.
• Experience in large-scale enterprise automotive or manufacturing operations.
• Experience evaluating third-party OEM software and firmware updates and coordinating securely with external field engineering vendors.
• Knowledge of industrial networking and protocols, including IECN/PFCN environments, Industrial Ethernet, EtherNet/IP, DeviceNet, Profibus, or comparable technologies.
• Experience assessing and prioritizing vulnerabilities where patching may be constrained by safety, production, availability, vendor support, or maintenance windows.
• Understanding of CVSS, EPSS, CISA KEV, exploit maturity, active exploitation, attack paths, and risk-based prioritization beyond severity alone.
• Experience with remediation governance, exception management, dashboards, metrics, and executive reporting.
• Experience correlating vulnerability findings with business, asset, identity, telemetry, network, SBOM, and threat-intelligence context to support risk-based prioritization and exploitability-focused decision-making.
• Strong understanding of remediation governance, exception management, dashboarding, metrics, and continuous improvement within a mature vulnerability management program.
• Familiarity with enterprise and OT security platforms such as Armis, Claroty, Tenable, Qualys, or Dragos, and strong understanding of network segmentation, VLANs, and port configurations in plant floors.
• Experience designing compensating controls and managing alternative mitigations when immediate software patching is not possible because of plant uptime constraints.
• Ability to work independently, exercise strong judgment, and deliver results with minimal guidance.
• Ability to solve complex, ambiguous problems using structured analysis and innovative approaches.
• Strong communication and influence skills, including the ability to present recommendations supported by data and analysis.

Nice To Haves

• Ability to run an end-to-end vulnerability intelligence workflow for a high-profile CVE, from initial awareness through intelligence collection, environmental relevance scoping, contextual scoring, and tailored outputs for executive and technical stakeholders.
• Ability to assess exploitability when public information is incomplete by reasoning through attack complexity, required privileges, user interaction, environmental preconditions, and control-stack effectiveness, then updating recommendations as proofs of concept and tooling emerge.
• Experience responding to high-impact zero-day vulnerabilities in critical third-party products by validating intelligence, scoping exposure, recommending interim mitigations, and structuring updates during the first 24 to 72 hours.
• Ability to reconcile conflicting vulnerability data across vendors, scanners, commercial feeds, and internal observations; document rationale; and establish a defensible environment-specific rating.
• Experience defining and using leadership metrics and dashboards that combine scanner, CMDB, ticketing, and threat-intelligence data to track remediation urgency, business exposure, and time to remediate.
• Knowledge of industrial cybersecurity frameworks, specifically ISA/IEC 62443 and NIST SP 800-82.
• Knowledge of leveraging the NIST Cybersecurity Framework (CSF 2.0) and CISA Cross-Sector Cybersecurity Performance Goals (CPGs) to govern, scorecard, and align technical vulnerabilities with enterprise risk metrics.

Responsibilities

• Lead and support the OT vulnerability and exposure management lifecycle for manufacturing IT/OT and Industrial Control Systems (ICS), protecting plant-floor operations while maintaining safe, reliable, and quality production.
• Correlate findings from OT discovery platforms, vulnerability scanners, CMDB, network data, plant context, threat intelligence, and remediation systems.
• Apply GM’s risk model and manufacturing and OT environmental variables to produce defensible ratings that reflect plant conditions.
• Evaluate how exploit impact, solution complexity, existing mitigations, segmentation, and operational constraints affect final risk priorities.
• Triage exposures using industrial context, CVSS, EPSS, and CISA Known Exploited Vulnerabilities (KEV), accounting for constraints of legacy manufacturing hardware.
• Map each vulnerability to affected OT hardware or software, accountable owner, recommended solution, and target remediation date.
• Serve as the primary security liaison between manufacturing cybersecurity, plant IT teams, and floor automation engineers to drive risk-informed mitigation plans.
• Support rapid response to high-impact ICS vulnerabilities, actively exploited vulnerabilities, and emerging threats affecting GM manufacturing technologies.
• Establish KPIs for exposure reduction and remediation velocity, and translate technical plant-floor risk into executive-ready dashboards.
• Build and mature AI capabilities for ingestion and asset-context enrichment, advanced attack-path and risk prioritization, and remediation workflow automation.
• Correlate scanner findings with asset, business, network, telemetry, identity, threat-intelligence, and SBOM context to improve prioritization accuracy and focus remediation on exposures most likely to create business risk.
• Apply threat intelligence and exploitability analytics, including exposure context, attack-path factors, and evidence of exploitation, to advance prioritization beyond severity-only scoring.
• Provide technical leadership, mentoring, and consultative support to less experienced engineers and aligned remediation owners.

Benefits

• Relocation benefits are available for candidates who qualify under company policy.
• GM describes benefits and well-being support from day one and refers candidates to its Total Rewards resources for details.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior