Senior Product Cybersecurity Engineer – Secure Product Architecture

General Motors • Milford, MI

1d • Hybrid

About The Position

The Senior Product Cybersecurity Engineer is part of General Motors’ Product Cybersecurity organization and focuses on protecting in-vehicle systems, trust boundaries, and access to vehicle functions. The engineer serves as a security design owner for in-vehicle security—including gateway security, secure diagnostics, secure unlock, and firewall capabilities—across current and next-generation software-defined vehicle platforms.

The role owns and evolves security designs and policies, converts threat assessments and architectural decisions into testable requirements, and works with engineering, architecture, validation, service, and supplier teams to ensure security controls are implemented effectively. It also identifies risks and gaps, leads design and implementation reviews, maintains security artifacts as platforms change, and serves as a subject-matter expert who develops references to help the broader team scale.

The role is categorized as hybrid. The selected candidate is expected to report to a specific location at least three times a week or at another frequency set by their manager. Relocation benefits are available to candidates who qualify under company policy. GM does not provide immigration-related sponsorship for this role.

Requirements

• At least 6 years of experience in product, embedded, vehicle, or automotive cybersecurity, with hands-on ownership of security design, requirements, or policy development.
• Strong working knowledge of secure diagnostics, secure vehicle access, in-vehicle security, gateways, and firewalls.
• Solid understanding of embedded security principles, including authentication, authorization, access control, secure communication, and protection of sensitive vehicle functions.
• Experience translating threat assessments and architectural decisions into technical security requirements and policies for internal engineering teams and suppliers.
• Experience owning or maintaining security policies and requirements across the development lifecycle.
• Demonstrated ability to lead security design and implementation reviews and align stakeholders across engineering, validation, service, architecture, and supplier teams.
• Strong communication and technical documentation skills, including the ability to explain complex security concepts to cybersecurity and non-cybersecurity audiences.
• Bachelor’s or master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or equivalent practical experience.
• Must not require GM immigration-related sponsorship now or in the future.

Nice To Haves

• Experience with software-defined vehicle architectures and evolving in-vehicle system designs.
• Experience working across supplier-delivered electronic control units, gateways, firewall platforms, diagnostic systems, and secure firmware ecosystems.
• Experience defining or managing firewall policies, gateway security policies, and communication security requirements.
• Prior embedded development, systems engineering, or vehicle engineering experience.
• Prior experience in the automotive industry or a similarly complex, deadline-driven, and regulated field.
• Familiarity with threat assessment processes and translating threat outputs into security requirements, implementation guidance, and validation objectives.
• Experience balancing security rigor with platform capability, supplier constraints, and vehicle program timing.

Responsibilities

• Own and evolve security design for secure diagnostics, secure unlock, in-vehicle private networks, gateways, and firewall capabilities.
• Translate threat assessments and architectural decisions into clear, testable security requirements for vehicle systems, platforms, and supplier-delivered components.
• Define and maintain security policies governing diagnostic access, communication paths, trust boundaries, and traffic between in-vehicle domains.
• Develop, maintain, and mature in-vehicle firewall and gateway policies as vehicle architectures, services, and delivery requirements evolve.
• Partner with engineering, architecture, validation, service, and supplier teams to ensure security controls and policies are implemented correctly.
• Lead and support security design, policy, and implementation reviews across internal teams and suppliers.
• Identify gaps, assess risk, and drive practical improvements to diagnostic access, secure unlock, gateway security, and firewall policy enforcement.
• Keep security requirements, design decisions, and policy artifacts current with software-defined vehicle delivery timelines and platform changes.
• Serve as a subject-matter expert for secure diagnostics and in-vehicle security, and create self-service references to help the broader team scale.

Benefits

• Relocation benefits are available for candidates who qualify under company policy.
• GM describes well-being support at work and at home and refers candidates to its Total Rewards resources.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior