Cyber Security Engineer

We are the movers of the world and the makers of the future. We get up every day, roll up our sleeves, and build a better world – together. At Ford, we're all a part of something bigger than ourselves. Are you ready to change the way the world moves?

Do you believe security is the foundation of resilient technology? We do! Protecting and future‑proofing Ford's enterprise technology environments requires rigorous vulnerability intelligence, scalable risk controls, and engineers who can translate complex threat landscapes into practical, actionable safeguards. That's where our Cybersecurity Risk Engineering team makes an impact. We partner with platform, cloud, and SRE teams to reduce exposure, harden infrastructure, and keep Ford's systems resilient.

Join us and use your security engineering expertise to drive risk‑reducing outcomes at enterprise scale.

We are seeking a Risk Engineer with strong technical acumen and practical experience in the vulnerability management space to design, prioritize, and enable risk‑reducing technical solutions across complex cloud and enterprise environments. As a Cyber Security Engineer, you should have a strong technical background and demonstrate experience in vulnerability management, security architecture, and control engineering. This role emphasizes solution engineering over process engineering—using vulnerability intelligence, risk frameworks, policies, and controls as inputs to architect practical, automatable, and scalable technical safeguards.

Responsibilities include the end‑to‑end engineering of vulnerability risk solutions, from exposure discovery through remediation workflow design and executive risk reporting, working within mixed‑skill teams and in close partnership with platform, cloud, security, and SRE stakeholders. By leveraging deep technical expertise and a risk‑informed engineering mindset, you will deliver impactful security solutions that reduce operational, cyber, and resilience risk at scale.

• Engineer technical vulnerability risk solutions that reduce operational, cyber, and resilience risk through architecture, automation, and control design.
• Translate vulnerability risk requirements, policies, and standards into implementable technical patterns, guardrails, and reference architectures.
• Prioritize and influence solution design decisions based on risk impact, blast radius, and recovery dependencies.
• Partner with platform, cloud, security, and SRE teams to embed risk controls directly into infrastructure and pipelines.
• Evaluate control effectiveness using technical signals and evidence
  , not just procedural compliance.
• Support initiatives such as vulnerability discovery, exposure analysis, remediation workflow design, secure cloud architectures, isolated recovery environments, identity and access hardening, and infrastructure resilience.
• Provide technical guidance on risk tradeoffs
  , recovery sequencing, and dependency‑aware system design.
• Work across broad vulnerability management capabilities, including scanners, asset and exposure data sources, prioritization models, remediation tracking platforms, exception workflows, and executive risk reporting.
• Contribute to lightweight process definition where needed—but always in service of enabling better technical outcomes.

We recognize that no one person will embody every single quality or skill listed below. If you are passionate about cybersecurity and have a strong foundation in vulnerability management and security engineering, we encourage you to apply.

• Bachelor's Degree in Computer Science, Cybersecurity, Information Systems, Software Engineering, or a related technical field
• Master's Degree in a related field is preferred

• 7+ years in engineering, security engineering, platform engineering, SRE, vulnerability management, or technical risk roles
• Proven ability to design and influence technical solutions across cross‑functional teams
• Hands‑on experience with vulnerability management practices, including discovery, prioritization, remediation coordination, exception handling, and risk reporting
• Demonstrated problem‑solving skills, analytical thinking, and the ability to…