Senior Product Cybersecurity Engineer – Secure Product Architecture

Job Description The Role The Senior Product Cybersecurity Engineer role sits within the broader Product Cybersecurity organization at General Motors and focuses on protecting in-vehicle systems, their trust boundaries, and access to vehicle functions. This engineer acts as a security design owner for in-vehicle security, including gateway security as well as secure diagnostics, unlock, and firewall capabilities, across current and next-generation software-defined vehicle platforms. What You’ll D o • Own and evolve the security design for secure diagnostics, secure unlock, in-vehicle private networks, gateways, and firewall capabilities. • Translate threat assessments and architectural decisions into clear, testable security requirements for vehicle systems, platforms, and supplier-delivered components. • Define and maintain security policies that control diagnostic access, communication paths, trust boundaries, and traffic between in-vehicle domains. • Develop, maintain, and mature in-vehicle firewall and gateway policies as vehicle architectures, services, and delivery requirements evolve. • Partner with engineering, architecture, validation, service, and supplier teams to ensure security controls and policies are implemented correctly. • Lead and support security design, policy, and implementation reviews across internal teams and suppliers. • Identify gaps, assess risk, and drive practical improvements to diagnostic access, secure unlock, gateway security, and firewall policy enforcement. • Keep security requirements, design decisions, and policy artifacts current with software-defined vehicle delivery timelines and platform changes. • Serve as a subject-matter expert for secure diagnostics and in-vehicle security, and build self-service references that help the broader team scale. Your Skills & Abilities (Required Qualifications ) • 6+ years of experience in product, embedded, vehicle, or automotive cybersecurity, with hands-on ownership of security design, requirements, or policy development. • Strong working knowledge of secure diagnostics, secure vehicle access, in-vehicle security, gateways, and firewalls. • Solid understanding of embedded security principles, including authentication, authorization, access control, secure communication, and protection of sensitive vehicle functions. • Experience translating threat assessments and architectural decisions into technical security requirements and policies for internal engineering teams and suppliers. • Experience owning or maintaining security policies and requirements across the development lifecycle. • Demonstrated ability to lead security design and implementation reviews and align stakeholders across engineering, validation, service, architecture, and supplier teams. • Strong communication and technical documentation skills, with the ability to explain complex security concepts to both cybersecurity and non-cybersecurity audiences. • Bachelor’s or master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or equivalent practical experience. What Will Give You A Competitive Edge (Preferred Qualifications ) • Experience with software-defined vehicle architectures and evolving in-vehicle system designs. • Experience working across supplier-delivered electronic control units, gateways, firewall platforms, diagnostic systems, and secure firmware ecosystems. • Experience defining or managing firewall policies, gateway security policies, and communication security requirements. • Prior embedded development, systems engineering, or vehicle engineering experience. • Prior role or experience in the automotive industry or a similarly complex, deadline-driven, and regulated field. • Familiarity with threat assessment p