Senior Cybersecurity Engineer – Vulnerability Exposure Management

Job Description The Role As a Senior Cybersecurity Vulnerability Engineer on GM’s Vulnerability Exposure Management team, you will serve as the senior technical contributor for Global Manufacturing and Operational Technology (OT) environments.  You will lead the engineering and continuous improvement of processes, data, scoring, tooling, and stakeholder workflows used to manage vulnerabilities across GM manufacturing and industrial environments. You will translate cyber intelligence and technical findings into plant-aware remediation priorities. Your decisions will account for exploitability, asset criticality, production impact, safety, uptime, solution complexity, maintenance windows, network location, existing mitigations, and business risk. This role is ideal for a senior engineer who can work across cybersecurity operations and manufacturing disciplines, establish technical credibility with plant stakeholders, and move complex exposures from discovery through validated remediation. You will solve diverse, non-standard security problems; translate broad challenges into implementable initiatives; and drive delivery across teams through technical leadership, sound judgment, and influence. What You'll Do • Lead and support OT vulnerability and exposure management lifecycle for manufacturing IT/OT and Industrial Control Systems (ICS), protecting plant-floor operations while maintaining safe, reliable, and quality production. • Correlate findings from OT discovery platforms, vulnerability scanners, CMDB, network data, plant context, threat intelligence, and remediation systems. • Apply GM’s risk model and OT & MFG environmental variables to produce defensible ratings that reflect plant reality. • Evaluate how exploit impact, solution complexity, existing mitigations, segmentation, and operational constraints affect the final GM risk priority. • Triage exposures using industrial-specific context, CVSS, EPSS, and CISA Known Exploited Vulnerabilities (KEV), recognizing the operational constraints of legacy manufacturing hardware. • Map each vulnerability to the affected OT hardware or software, accountable owner, recommended solution, and target remediation date. • Act as the primary security liaison between manufacturing cybersecurity, plant IT team, and floor automation engineers to drive risk-informed mitigation plans. • Support rapid response to high-impact ICS vulnerabilities, actively exploited vulnerabilities, and emerging threats affecting GM manufacturing technologies. • Establish key performance indicators (KPIs) tracking exposure reduction and remediation velocity, translating technical plant-floor risk into executive-ready dashboards • Build and mature AI capabilities for ingestion & asset context enrichment, advanced attack path & risk prioritization, and remediation workflow automation. • Correlate scanner findings with asset, business, network, telemetry, identity, threat-intelligence, and SBOM context to improve prioritization accuracy and focus remediation on exposures most likely to create business risk. • Apply threat intelligence and exploitability analytics, including exposure context, attack-path factors, and evidence of exploitation, to move prioritization beyond severity-only scoring. • Provide technical leadership, mentoring, and consultative support to less experienced engineers and aligned remediation owners. Your Skills & Abilities (Required Qualifications) • Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field, or equivalent practical experience. • Experience in cybersecurity engineering, vulnerability management, security operations, manufacturing IT/OT and Industrial Control Systems (ICS), infrastructure security, or related dom