Senior Security Software Engineer, Advanced Security

General Motors • Austin, TX

11d • Hybrid

About The Position

General Motors’ Advanced Security Engineering team develops security capabilities to reduce real security exposure. The team uses artificial intelligence to strengthen defenses, validate weaknesses, and support authorized offensive security testing in controlled environments. It combines security findings with code, cloud, and runtime context to identify real, reachable issues and support remediation, mitigation, or detection.

The Senior Security Software Engineer will design, build, and operate cloud services and AI agents that analyze untrusted code, handle sensitive security data, and use security tools and computing environments under controlled access. Safe design of that access is a core part of the role. As a senior individual contributor, the engineer works independently with minimal guidance, turns broad challenges into practical solutions, and owns delivery across team boundaries. The role includes technical decision-making, accountability for system reliability, security, and cost, helping shape a new team and its capabilities, collaborating with security specialists, and mentoring engineers.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.
• 5+ years of experience in software engineering, cloud engineering, or security engineering.
• Strong experience writing production Python.
• Experience with infrastructure as code, such as Terraform, and CI/CD on a major cloud platform.
• Working knowledge of application security, including common vulnerability classes, how security scanners work, and where they produce false positives.
• Experience building secure systems using least privilege, secrets management, isolation, and safe handling of untrusted input.
• Ability to own work across teams, make sound decisions with limited information, and explain technical risk to people who are not security specialists.
• Experience using agentic LLM tools and solutions.

Nice To Haves

• Experience building applications with large language models and agent frameworks, including tool use and output evaluation.
• Experience with containers and Kubernetes.
• Experience with sandboxing and isolation, or securing systems that execute untrusted code.
• Experience in static or program analysis, such as writing Semgrep or CodeQL rules.
• Experience in vulnerability research, penetration testing, or exploit development.
• Familiarity with AI security risks and controls, such as the OWASP Top 10 for LLM Applications.
• Public examples of shipped work, such as open-source contributions, published tools, or technical write-ups.

Responsibilities

• Design, build, and operate production cloud services in Python, including containerized workloads, event-driven processing, and data storage; define and manage supporting infrastructure as code.
• Integrate findings and context from security tools, source control, and cloud APIs; build AI agents to triage findings, gather evidence from source code and cloud configuration, and propose fixes.
• Build and harden sandboxed environments for AI-enabled testing of authorized targets, using defense in depth and accounting for possible failure of individual containment boundaries.
• Control agent access through isolation, least-privilege identities, network egress limits, and secrets management; separate agents that produce results from agents that verify them.
• Treat source code, tool output, and model responses as untrusted input; defend against prompt injection and keep sensitive data out of prompts and logs.
• Evaluate model accuracy, cost, and latency to inform model selection and detect regressions; use evidence to explain trade-offs and guide system improvements.
• Partner with application security, penetration testing, and cloud security engineers to turn expert judgment into repeatable checks and deliver solutions across teams.
• Communicate technical risks and recommendations to non-specialists, review code, and mentor less-experienced engineers through constructive feedback and collaborative problem-solving.
• Own delivery across team boundaries, exercise sound technical judgment, and remain accountable for the reliability, security, and cost of systems delivered.

Benefits

• Relocation benefits are available for candidates who qualify under company policy.
• GM provides well-being support at work and at home through its Total Rewards resources.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior