Security Engineer

• Lead and perform Threat Analysis and Risk Assessment (TARA) for vehicle components and systems (e.g., ADAS, Infotainment, Powertrain, Connectivity) in accordance with ISO/SAE 21434.
• Define and implement robust security controls, including Secure Boot, Secure Onboard Communication (SecOC), Hardware Security Modules (HSM), and encrypted Over-the-Air (OTA) updates.
• Ensure all vehicle systems meet global regulatory requirements such as UN R155 and UN R156. Maintain alignment with industry best practices (NIST, SAE).
• Oversee penetration testing and vulnerability scanning activities. Analyze results to prioritize fixes and provide technical guidance for remediation.
• Lead the technical response to identified security incidents or newly discovered zero-day vulnerabilities affecting the fleet.
• Evaluate the cybersecurity posture of Tier 1 and Tier 2 suppliers, ensuring their components meet the company's rigorous security requirements.
• Provide technical leadership and mentorship to junior and mid-level engineers, fostering a culture of "Security by Design."

Advanced Cybersecurity Engineer – Automotive

• End-to-End Security Architecture & Engineering
• Lifecycle Integration: Lead and integrate cybersecurity engineering across the entire battery storage system lifecycle, including design, manufacturing, deployment, operations, and decommissioning.
• Hardware & Firmware Hardening: Define, implement, and audit security controls at the silicon, microcontroller, and firmware levels, including secure boot, cryptographic key management, secure storage, and Hardware Security Modules (HSMs).
• Technical Innovation: Develop solutions to unusually complex cyber-physical security problems that require a high degree of ingenuity and creativity. Establish engineering precedents and design patterns that will serve as the template for future product lines and support the long-term reputation of the organization.
• Threat Modeling & Offensive Security Validation
• Cyber-Physical Threat Modeling: Lead threat modeling (e.g., STRIDE) and risk assessments to resolve highly ambiguous, large-scale technical challenges across battery management systems (BMS), power conversion systems (PCS), and overall BESS architectures. Develop novel, high-performance, and resilient security frameworks under extreme hardware and operational constraints.
• Active Penetration Testing: Plan, coordinate, and execute hands-on penetration testing and vulnerability assessments on embedded hardware, firmware, and communication protocols (e.g., Modbus, CAN, DNP3, and TCP/IP).
• Governance, Compliance & Incident Management
• Standards & Framework Alignment: Align product engineering processes and security controls with relevant industry standards and frameworks (e.g., IEC 62443, ISO 21434, UL 2900, and NIST SP 800-82).
• Project Risk Governance: Establish and manage cybersecurity work packages, compile risk registers, and represent cybersecurity requirements in stage-gate reviews and engineering boards.
• Incident Response Operations: Develop and support security incident response playbooks for fielded BESS assets, and manage coordinated vulnerability disclosure for discovered firmware/hardware bugs.
• Cross-Functional Collaboration & Technical Leadership
• Consensus Building: Drive technical security direction and best practices across multiple engineering teams (hardware, firmware, cloud, and systems), building architectural consensus for end-to-end product security.
• Talent Mentorship: Actively mentor and guide peers to elevate the collective technical cybersecurity capabilities of the organization.

Product Cybersecurity Manager

• Under the supervision of the Supervisor, Protection Services, the Exhibition Security Officer serves as an ambassador for the museum and the department during special exhibitions.
• The position tactfully and effectively communicates the policies and practices established for the protection and safety of museum staff, guests, and the collection.
• Staff special exhibition gallery posts, both stationery and foot patrols, during public hours with vigilance, attention to detail, and a positive, welcoming demeanor.
• Serve as an ambassador for the museum and the department by providing exemplary service and support while tactfully enforcing policies and procedures.
• Direct visitors to various attractions and facilities within the museum and throughout Midtown Detroit.
• Assist the Detroit Institute of Arts Museum Security Officers during emergencies and non-routine operations, including but not limited to: evacuations, lockdowns, shelter-in-place, medical emergencies, and other unusual circumstances that may arise.
• Apply DIA values to interactions to support a culture of belonging among internal and external stakeholders.
• Perform other duties as assigned.

Temporary Exhibition Security Officer

• Setting the technical vision and architecting, implementing, and operating scalable, highly available PKI and secrets management services for the enterprise.
• Owning design decisions that shape internal trust models, cryptographic architectures, and access patterns for the most sensitive data and systems.
• Defining, implementing, and continuously improving policies, processes, and controls for the full lifecycle of keys, certificates, and secrets across diverse platforms.
• Influencing and aligning engineering, infrastructure, and leadership teams to deliver robust, observable, and compliant cryptographic systems.
• Mentoring and developing engineers, raising the bar for technical excellence, and driving consistent best practices for cryptographic and secrets management across the organization.
• Advising senior leadership on long-term security architecture strategy, trade-offs, and investment priorities related to identity, PKI, and secrets management.
• Providing operational leadership, including participation in on-call rotations for global, mission-critical services and driving post-incident improvements.
• Leading HSM strategy, including architecture, platform selection, appliance consolidation, and multi-year roadmap planning in alignment with enterprise security and compliance goals.

Staff Cybersecurity Engineer – PKI, Secrets Management

• Provide on-site support to the manufacturing team, assisting with security and fire operations for the plant to include staffing requirements, access control, CCTV monitoring, fire inspections, and emergency support.
• Identify and escalate physical security gaps through proactive security initiatives.
• Assist with investigations, escalating to the Supervisor and/or Regional Security Manager and Global Investigations, as appropriate.
• Assist in overseeing day-to-day security operations, including contract security personnel. Identify and escalate performance issues.
• Assist with special projects and security initiatives, including GAO audits, AON fire inspection audits, daily plant walks, etc.
• Enforce Security and Fire manual, bulletins, and protocols to ensure compliance.
• Protect company classified information with confidentiality.
• Collaborate with appropriate internal Ford skill teams and external work partners to plan for and provide security coverage for special events, as directed.
• Assist in coordinating security for VIP visits.
• Monitor and analyze trends related to property loss or theft of high-value components/intellectual property, implementing counter-measures as needed.
• May perform the role of Incident Commander for emergencies.
• Respond to emergency incidents to include medical, behavioral, fire, trespassing, accidents, suspicious activity, thefts, etc. Escalate appropriately to the Supervisor and/or Regional Security Manager.
• Collaborate with People Matters, Human Resources, Labor Relations, and Safety representatives as necessary to discuss and resolve workplace issues.
• Develop and maintain strong relationships with internal skill teams to ensure unified alignment with all security and fire related matters.
• Ensure compliance with the MCRP for security and fire related requirements.
• Ensure monthly fire tasks are completed and documented by contract security personnel.
• Enhance emergency response capabilities by utilizing incident response tools and through the deployment of emergency response equipment for the company or local municipalities.

Manufacturing Security Specialist

• Lead the design and implementation of authentication and authorization frameworks using open industry standards.
• Architect and build access control systems that use permissions, roles, and attributes to decide who can perform specific actions.
• Design and implement policy-driven and distributed authorization solutions.
• Lead security and authorization reviews of services and drive remediation of issues.
• Design, develop, test, and maintain cloud-native microservices and web application programming interfaces.
• Define, version, and document application programming interfaces using standard interface definition formats.
• Make key decisions for how services are built, deployed, and operated on public cloud platforms.
• Write clean, testable, and secure code in one or more languages such as Go, Java, Python, JavaScript, and Structured Query Language (SQL).
• Create and review technical designs, architecture documents, and diagrams.
• Use artificial intelligence–based development tools to improve design, coding, testing, and documentation.
• Design and implement containerized workloads using container runtimes and orchestration platforms.
• Lead the design and improvement of continuous integration and continuous delivery pipelines.
• Use infrastructure-as-code tools to define and manage cloud infrastructure.
• Define and implement observability for services, including metrics, logs, traces, dashboards, and alerts.
• Integrate and operate centralized logging and analytics solutions.
• Design data models and manage data storage using relational databases, graph databases, and other data technologies.
• Model and store authorization relationships and permissions using graph-based data stores.
• Use modern engineering tools for development, testing, troubleshooting, and event streaming.
• Mentor and coach other engineers and share engineering best practices in security and cloud.

Senior Security Software Engineer

• Lead the design, implementation, and continuous improvement of the enterprise Secure Software Development Lifecycle (Secure SDLC) and Product Security program
• Drive implementation of a world-class enterprise Product Security and Secure SDLC control framework within the existing IT Target Operating Model
• Develop and track Product Security KPIs/KRIs
• Ensure alignment of security controls across teams
• Oversee execution of threat modeling and design security reviews for high-risk applications and APIs
• Integrate security signals from various security teams to produce holistic application risk views
• Drive risk-based prioritization by providing inputs into Agile backlogs
• Facilitate collaboration across various security functions and the Chief Software Engineering organization

Director, Product Security

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Establishing annual projects and deliverables using company business goals and strategies
• Creating clear engineering diagrams, security analysis, whitepapers, system documentation, presentations, and other deliverables
• Presenting to diverse size groups and translating security technologies and concepts to a non-technical audience
• Planning, designing, implementing, and maintaining security-related technologies
• Participating in projects as required; analyzing, designing, developing, and implementing security solutions which protect the information assets while enabling business functionality
• Utilizing software and hardware tools, identifying and diagnosing problems affecting information security tools and systems, and providing 2nd and 3rd tier operational support
• Providing information security expertise and consulting to internal IT, business system owners, and other stakeholders
• Performing product and solution life cycle management ensuring capacity, integrity, and availability of all security systems
• Aligning technologies to support overall strategy and information security framework
• Ensuring new and existing products conform to information security policies, standards, and best practices
• Conducting research on emerging technologies in support of enterprise operations
• Reviewing new and existing system designs for compliance with security standards and best practices

Senior IT Security Engineer

• Monitor and triage alerts across various security tools
• Validate alert severity, business impact, affected assets, containment status, and escalation requirements.
• Coordinate security events from initial triage through containment, documentation, closure, and post-incident follow-up.
• Support daily dashboard review, security ticket queues, alert quality checks, and operational reporting.
• Develop, tune, and maintain detection logic in security tools.
• Reduce false positives and alert noise by reviewing recurring detections.
• Assist with incident response for endpoint, identity, cloud, email, and suspicious activity events.
• Support security operations across various Microsoft security tools.
• Create and maintain security runbooks and knowledge base articles.

• Evaluate effective of controls and escalate as appropriate.
• Support the identification and quantification/qualification of risks with Threat and Vulnerability Management, Vulnerability SDLC, Zero Trust, or the Network Cybersecurity segment(s)
• Manage the governance of issues through their lifecycle, from ideation to validation and subsequent closure
• Execute risk assessments against defined scopes and planned initiatives in alignment with our enterprise risk management frameworks
• Support executive reporting on the health and status of our risk, issues, and control portfolio
• Act as a trusted advisor to your customer, helping work through ambiguity and providing a risk perspective to new challenges or opportunities

Cybersecurity Risk Manager

• Develop and manage client relationships, serving as the primary point of contact for key accounts.
• Generate new business opportunities by expanding within existing accounts.
• Collaborate with clients to understand business challenges and align solutions across physical security and managed services.
• Leverage knowledge of CCTV, intrusion, fire, and nurse call systems to design tailored solutions.
• Stay current with new security technologies, products, and industry trends to advise clients effectively.
• Partner with technical teams to ensure client needs are accurately translated into deliverables
• Identify opportunities for up-selling and cross-selling across the security and IT service portfolio.

Technical Account Manager – Electronic Security Systems

• Design and develop security-focused software solutions, tools, and automation frameworks
• Integrate security into CI/CD pipelines and cloud-native environments
• Collaborate with infrastructure and application teams to embed security into system architecture
• Conduct code reviews and threat modeling to identify and remediate vulnerabilities
• Build and maintain systems for monitoring, logging, and alerting on security events
• Develop and maintain APIs and microservices that support security operations
• Participate in incident response and forensic investigations as needed
• Stay current with emerging threats, vulnerabilities, and security technologies

Staff CyberSecurity Software Engineer – IAM

• Design, develop, and maintain robust data pipelines using GCP native services.
• Build and manage data quality frameworks to ensure the integrity and reliability of security data assets.
• Integrate diverse data sources and security tools via APIs to centralize security oversight.
• Optimize database performance, query efficiency, and storage costs within Google BigQuery.
• (Preferred) Utilize Cribl to route, shape, and enrich incoming security telemetry and log data.

Senior Data Engineer – Cybersecurity

• Work closely with client executives and management teams to understand their businesses and assist in identifying and managing financial and operational risks within their business systems to ensure technology risks are managed:
• Develop in-depth knowledge of clients’ businesses and industries by having direct client interaction while working on multiple aspects of an engagement
• Think independently and strategically about your clients’ business, systems and risks providing recommendations for business and process improvements based upon knowledge gained relative to the client’s operations, processes and business objectives
• Provide strategic business assurance to clients by assisting in the implementation of new processes and controls that address key risks
• Assess, manage and optimize information technology risk across a wide range of areas, including cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity
• Review clients' processes and controls against industry frameworks, identifying gaps in design and execution, and communicating issues and recommendations to clients
• Assist in the development of audit programs and the execution of internal audits and IT control assessments in the areas of:
• IT strategy and governance
• IT operations, business continuity and disaster recovery
• Cybersecurity
• Third party risk
• ITGC and application controls
• SOC reporting
• Regulatory and compliance requirements
• Assist in drafting comprehensive executive summaries and final reports for delivery to the client, documenting and reviewing engagement work papers in accordance with industry-accepted internal audit methodologies
• Act as a valued business advisor, build relationships and communicate effectively with the client to provide superior client service
• Facilitate professional and effective presentations to internal and external audiences
• Continue to develop your knowledge and experience working with a variety of technology environments, platforms, applications and tools/utilities
• Demonstrate the desire to continually grow, learn and develop skills and knowledge through external and internal education, training and cross-training opportunities to maximize personal contribution to the organizational goals and ongoing career development
• Utilize your entrepreneurial skills to network and build strong relationships internally and externally with clients
• Support the growth and development of team members through the Baker Tilly Care and Teach philosophy, helping associates meet their professional goals
• Enjoy friendships, social activities and team outings that encourage a work-life balance

Senior IT Audit, Cybersecurity & Risk Advisory

• Own and maintain GM's product cybersecurity controls framework, ensuring coverage across all applicable vehicle programs, markets, and regulatory requirements.
• Lead and oversee Threat Analysis and Risk Assessment (TARA) activities for vehicle product systems.
• Provide requirements for and input to product cybersecurity policies and standards.
• Monitor and interpret global automotive cybersecurity regulations and standards.
• Manage all aspects of audit readiness and post-audit remediation.
• Lead the identification, assessment, and prioritization of cybersecurity control gaps across vehicle product systems.
• Partner closely with the Vehicle Cybersecurity Engineering team and other engineering organizations.
• Lead, develop, and mentor a team of cybersecurity GRC professionals.

Manager – Product Cyber Security Compliance

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Lead the design, development, and deployment of advanced AI/ML solutions focused on cybersecurity, network analytics, and enterprise risk detection.
• Build and operationalize machine learning models, including anomaly detection, predictive analytics, and classification systems for security and network use cases.
• Drive the implementation of Generative AI and Agentic AI solutions to enhance automation, threat intelligence, and decision-making workflows.
• Collaborate with cybersecurity, network engineering, and IAM teams to identify opportunities for AI-driven optimization and risk mitigation.
• Architect end-to-end ML pipelines, ensuring scalability, reliability, and integration with enterprise systems.
• Work hands-on with data—ingestion, preprocessing, feature engineering, and model tuning—to deliver production-grade solutions.
• Translate complex technical outcomes into business insights using dashboards and visualizations (e.g., Power BI) for stakeholders and leadership.

Principal AI/ML Engineer – Cybersecurity, AIOps

• Lead the development and integration of advanced embedded cybersecurity technologies for GE Aerospace products and platforms
• Architect and apply secure embedded solutions across hardware, firmware, and software environments for mission-critical aerospace applications
• Partner with hardware, software, firmware, and toolchain developers to identify, evaluate, and implement cybersecurity solutions for complex product needs
• Lead medium- to large-scale technical projects, driving execution from concept definition through implementation and transition into product environments
• Help mature innovative cybersecurity capabilities into product-ready solutions that can be deployed across GE Aerospace platforms
• Contribute to technical strategy and roadmap definition for secure embedded platforms, aligning innovation with business and product priorities
• Document technical approaches, design outcomes, and innovations through patent applications, technical reports, publications, and internal engineering deliverables
• Stay current on emerging trends in embedded cybersecurity, platform security, and secure system design, and apply that knowledge to new product opportunities
• Collaborate across GE Aerospace businesses, engineering teams, and external stakeholders including U.S. Government agencies
• Shape and lead technical proposals and response strategies for internal business opportunities and external customers

Principal Engineer – Cybersecurity

• Onboarding & Vendor/System integration - Leading the security onboarding process for new OT Systems and customer facing solutions, ensuring all assets are assessed, documented and approved before production deployment.
• Define and enforce security requirements, including network segmentation standards, access control models, and identity management policies for OT and customer solution environments.
• Coordinate with procurement, legal and IT teams to ensure that third party vendors meet security baseline requirements through contract review and vendor risk assessments.
• Documentation & Standards Management - Own the security documentation library for OT and customer-facing solution domains including network diagrams, network flows, security control matrices, security plans and backup solutions.
• Develop and maintain security standards and procedures specific to OT environments.
• Ensure documentation remains current through periodic review cycles and is aligned with applicable compliance frameworks.
• Collaborate with engineering, operations and product teams to capture security architecture decisions and maintain accurate as-built documentation.
• Design Review & Architecture Participation - Participate in architecture design review as a security SME.
• Review proposed OT system architectures, network designs and customer solution designs for security gaps – providing documented findings and remediation recommendations.
• Security Review & Risk Assessment - Lead security reviews for OT network changes, new customer-facing solutions and significant modifications to existing deployments, producing risk assessment reports with prioritized findings.
• Coordinate penetration testing and vulnerability assessments activities scoped to OT and customer solution environments; track findings through remediation.
• Assess and communicate residual risk to business stakeholders and CISO, facilitating informed risk acceptance decisions when appropriate.
• Serve as the security point of contact for customer security questionnaires, audits and third party security assessments related to delivered solutions.

See all jobs on JobTailor