Senior Product Cybersecurity Engineer – Secure Product Architecture

General Motors

Senior Product Cybersecurity Engineer securing General Motors’ in-vehicle communications architecture. Translating threat assessments into requirements for software-defined vehicle platforms and suppliers.

Posted 9/3/2026full-timeWarren • Missouri • 🇺🇸 United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in in-vehicle communications security, including message authentication, firewalls, and automotive Ethernet, while effectively translating security design into actionable requirements for engineering and supplier teams. Proven ability to lead security design reviews and align stakeholders across various teams in a complex, regulated environment.

Highest-signal resume keywords

In-Vehicle Communications SecuritySecurity Design OwnershipEmbedded Security PrinciplesTechnical Requirements TranslationStakeholder Alignment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Message AuthenticationIn-Vehicle FirewallsAutomotive EthernetSecure CommunicationKey and Certificate Lifecycle ManagementReplay/Freshness ProtectionSecure ProvisioningCC++Java

Soft Skills

CollaborationLeadershipProblem-Solving

Tools & Technologies

AUTOSAR SecOCFVMSOME/IPDoIPTLSCANCAN-FDUDS (ISO 14229)

Industry Keywords

CybersecurityAutomotive IndustryEmbedded DevelopmentSoftware-Defined Vehicle ArchitecturesSupplier-Delivered ECU

Tech Stack

Tools & technologies

C++Cyber SecurityFirewallsJavaPython

About the role

Key responsibilities & impact

Own and evolve security design for in-vehicle communications, including message authentication (SecOC), in-vehicle firewalls, and in-vehicle Ethernet security
Translate threat assessments and architectural decisions into clear, testable security requirements for engineering and supplier teams
Right-size requirements against supplier and platform capability, adjusting scope when requirements are not achievable
Lead and support security design and implementation reviews across internal teams and suppliers
Keep security design and specifications current with software-defined vehicle delivery timelines and platform changes
Serve as a subject-matter expert for in-vehicle communications security
Build self-service references so the broader team can scale
Drive requirements and blocked items to closure
Balance security rigor against supplier capability and vehicle program timing
Collaborate with engineers to build security early in the development process

Requirements

What you’ll need

6+ years of experience in product, embedded, or vehicle cybersecurity, with hands-on ownership of security design and requirements
Strong working knowledge of in-vehicle communications security, including message authentication, firewalls, and automotive Ethernet
Solid understanding of embedded security principles, including secure communication, key and certificate lifecycle management, replay/freshness protection, and secure provisioning
Experience owning security design and translating it into technical requirements and specifications for internal teams and suppliers across the development lifecycle
Demonstrated ability to lead security design and implementation reviews and align stakeholders across engineering, validation, and supplier teams
Bachelor’s or master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or equivalent practical experience
GM does not provide immigration-related sponsorship; candidates must not require GM immigration sponsorship now or in the future, including H1-B, OPT, STEM OPT, CPT, TN, J-1, or other immigration support
Preferred: experience with software-defined vehicle architectures and service-based in-vehicle communication
Preferred: experience across supplier-delivered ECU, firewall, and secure firmware ecosystems
Preferred: experience with AUTOSAR SecOC, FVM, Automotive Ethernet (SOME/IP, DoIP, TLS), CAN/CAN-FD, and UDS (ISO 14229) security services
Preferred: embedded development experience with C, C++, Java, or Python
Preferred: automotive industry or similarly complex, deadline-driven, regulated-field experience
Preferred: familiarity with TARA and translating threat outputs into security requirements

Benefits

Comp & perks

This job may be eligible for relocation benefits
GM Benefits Overview and Total Rewards resources
Reasonable accommodations for job seekers with disabilities