Senior Product Cybersecurity Engineer – Secure Product Architecture

• Own and evolve security design for in-vehicle communications, including message authentication (SecOC), in-vehicle firewalls, and in-vehicle Ethernet security
• Translate threat assessments and architectural decisions into clear, testable security requirements for engineering and supplier teams
• Right-size requirements against supplier and platform capability, adjusting scope when requirements are not achievable
• Lead and support security design and implementation reviews across internal teams and suppliers
• Keep security design and specifications current with software-defined vehicle delivery timelines and platform changes
• Serve as a subject-matter expert for in-vehicle communications security
• Build self-service references so the broader team can scale
• Drive requirements and blocked items to closure
• Balance security rigor against supplier capability and vehicle program timing
• Collaborate with engineers to build security early in the development process

• 6+ years of experience in product, embedded, or vehicle cybersecurity, with hands-on ownership of security design and requirements
• Strong working knowledge of in-vehicle communications security, including message authentication, firewalls, and automotive Ethernet
• Solid understanding of embedded security principles, including secure communication, key and certificate lifecycle management, replay/freshness protection, and secure provisioning
• Experience owning security design and translating it into technical requirements and specifications for internal teams and suppliers across the development lifecycle
• Demonstrated ability to lead security design and implementation reviews and align stakeholders across engineering, validation, and supplier teams
• Bachelor’s or master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or equivalent practical experience
• GM does not provide immigration-related sponsorship; candidates must not require GM immigration sponsorship now or in the future, including H1-B, OPT, STEM OPT, CPT, TN, J-1, or other immigration support
• Preferred: experience with software-defined vehicle architectures and service-based in-vehicle communication
• Preferred: experience across supplier-delivered ECU, firewall, and secure firmware ecosystems
• Preferred: experience with AUTOSAR SecOC, FVM, Automotive Ethernet (SOME/IP, DoIP, TLS), CAN/CAN-FD, and UDS (ISO 14229) security services
• Preferred: embedded development experience with C, C++, Java, or Python
• Preferred: automotive industry or similarly complex, deadline-driven, regulated-field experience
• Preferred: familiarity with TARA and translating threat outputs into security requirements

Demonstrates expertise in in-vehicle communications security, including message authentication, firewalls, and automotive Ethernet, while effectively translating security design into actionable requirements for engineering and supplier teams. Proven ability to lead security design reviews and align stakeholders across various teams in a complex, regulated environment.

• In-Vehicle Communications Security
• Security Design Ownership
• Embedded Security Principles
• Technical Requirements Translation
• Stakeholder Alignment

• Message Authentication
• In-Vehicle Firewalls
• Automotive Ethernet
• Secure Communication
• Key and Certificate Lifecycle Management
• Replay/Freshness Protection
• Secure Provisioning
• C
• C++
• Java

• Collaboration
• Leadership
• Problem-Solving

• Cybersecurity
• Automotive Industry
• Embedded Development
• Software-Defined Vehicle Architectures
• Supplier-Delivered ECU

• AUTOSAR SecOC
• FVM
• SOME/IP
• DoIP
• TLS
• CAN
• CAN-FD
• UDS (ISO 14229)