GM Financial

Security Engineer

• **About the Role**
• The **AVP Offensive Security **will lead the planning, execution, and oversight of all offensive security initiatives, including advanced threat simulations, penetration testing, and ethical hacking in both physical and digital environments. Collaborating closely with Cybersecurity peers, this role manages a skilled team that fosters innovation while aligning the team’s operations with business priorities. By proactively developing attack methodologies and addressing real-world adversary tactics targeting enterprise financial services, the AVP strengthens GM Financial’s defenses and ensures the protection of sensitive customer and financial data.
• In this role, you will:
• **Strategic Leadership & Program Management**
• - Develop and execute a comprehensive offensive security strategy aligned with the company's business goals and risk appetite
• - Design and execute advanced threat emulation scenarios, including physical, social, and digital attack vectors
• - Collaborate with Cybersecurity peers and partners (i.e. Architecture, Engineering, Operations, Threat Intelligence, and Risk Management) to ensure comprehensive attack coverage and feedback loops
• - Lead and mentor a team of offensive security professionals, fostering a culture of innovation, continuous learning, and excellence
• - Manage the full lifecycle of offensive security engagements, including scope definition, execution, reporting, and remediation tracking
• - Establish and maintain a robust penetration testing program that covers all critical applications, infrastructure, and network components
• **Technical Execution & Oversight**
• - Oversee and conduct advanced penetration tests on web applications, mobile applications, APIs, network infrastructure, and physical locations
• - Perform vulnerability research and exploit development to identify and test zero-day vulnerabilities in our systems
• - Analyze and interpret complex security data to identify trends, emerging threats, and areas for improvement
• - Stay current with the latest offensive security tools, techniques, and procedures (TTPs) and apply them to our security assessments
• - Conduct Cybersecurity Tabletop exercises and summarize the exercise for senior leadership, including areas of success and opportunities for improvement
• **Communication & Collaboration**
• - Communicate complex security risks and findings to both technical and non-technical stakeholders across the organization, including senior leadership
• - Integrate the identification and remediation of findings with other Cybersecurity departments, business owners, and information technology partners
• - Deliver detailed post-engagement reports with risk-rated findings, proof of concept artifacts, and remediation guidance
• - Partner with development, IT, Digital, and business teams to ensure security is integrated into the software development lifecycle (SDLC) and business processes
• - Act as a subject matter expert for internal teams on offensive security topics
• - Establish and maintain strong partnerships with key peers and groups to ensure the success of the Offensive Security Team through challenging situations, keeping focus on long-term outcomes and results
• **Reporting Structure:**
• - Report to: SVP Cybersecurity Architecture & Offensive Security

AVP – Offensive Security

Backend Engineer

• **About the Role:**
• The Software Development Engineer (SDE) contributes in all areas of development as a member of an Agile Scrum team. Team members will have areas of strength and some level of specialization, but must be adept at learning tools and languages that enable the team member to participate in all areas of product development. Being adaptable and knowledgeable in multiple domains enables the team members to swarm or fill gaps in order to meet commitments.
• - The SDE II works under limited or no supervisory guidance and consistently delivers on commitments
• - The SDE II is expected to demonstrate excellence in the software development practices performed by Scrum teams
• - Developing product features for any or all of the following: data marketplaces, mobile applications, web applications, and API services and migrating the product to the public cloud within the team as appropriate
• - The SDE II invests in learning and experimentation to expedite cloud implementations
• - Using automated pipelines for building, testing, and deploying software packages; continuously improving both the quality and speed of the pipelines
• - Contribute to test automation and participating in peer reviews to increase product quality
• - Maintain a production-first mindset focused on scale, uptime, and ability to rapidly triage/resolve production issues
• - Invest in our Agile practice to continuously improve product quality, time to market, and team member satisfaction

Software Development Engineer II – C#/.NET, Azure

Account Manager

• As the GM Financial Commercial Vehicle Account Manager, you will be responsible for service and support of all GM Business Elite franchised dealers and Commercial Vehicle Lending (CVL) products and programs.
• Provide quality customer service by satisfying the business needs of the dealers, customers, manufacturer partners and GM Financial.
• Effectively manage and market assigned dealer relationships to achieve all quality, pricing, and volume objectives.
• Develop dealer relationships that generate contracts according to GM Financial CVL's established credit risk and profitability models.
• Support the growth and development of the GM Financial Fleet Solutions Program, providing solutions to dealers and customers that create loyalty and retention.