About the Role
The Offensive Security function at General Motors strengthens the company's mission by continuously validating defenses through real-world attack simulation, penetration testing, responsible disclosure, and feedback loops. This role is ideal for a leader who can grow a high-performing team, turn strategy into execution, and raise the security bar across a complex engineering environment.
Responsibilities
- Lead and develop a team responsible for penetration testing, adversary emulation, responsible disclosure triage, and verification of security controls across applications, platforms, and services.
- Own the function roadmap, operating model, and key performance indicators, including coverage, remediation velocity, validation quality, and risk reduction outcomes.
- Translate Cybersecurity strategy into quarterly priorities, staffing plans, resource allocation decisions, and clear execution goals for the team.
- Partner with engineering and platform teams to turn offensive security findings into remediation actions, prevention improvements, and stronger secure-by-design practices.
- Establish scalable testing approaches for web, API, cloud, identity, container, and software delivery environments, balancing depth, speed, and business risk.
- Drive stakeholder communication, cross-functional alignment, and change leadership, including escalation of significant risks and recommendations for action.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
- 10+ years of cybersecurity experience, including 5+ years in offensive security, penetration testing, red teaming, application security testing, or closely related disciplines.
- 5+ years of people leadership experience, including hiring, performance management, coaching, workforce planning, and team development.
- 3+ years leading complex, cross-functional security programs with measurable outcomes across multiple product, software, or platform teams.
- Experience assessing or testing modern attack surfaces such as web applications, APIs, cloud services, identity systems, containers, developer tooling, or software delivery pipelines.
- Demonstrated ability to define key performance indicators, prioritize competing work, communicate risk to technical and business stakeholders, and drive remediation to closure.
Skills
- penetration testing
- adversary emulation
- responsible disclosure triage
- web application security
- API security
- cloud security
- identity system security
- container security
- software delivery pipeline security
- security automation
- vulnerability intake
- bug bounty program operations
Location
- Hybrid
Work Type
- Hybrid
Experience Level
- 10+ years of cybersecurity experience
- 5+ years in offensive security
- 5+ years of people leadership experience
- 3+ years leading complex, cross-functional security programs
Education Level
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
Benefits
- Relocation benefits may be available.
- GM supports a rewarding career that rewards you personally.
About the Company
- General Motors is building secure software and connected experiences at scale.
- Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.
- We believe we all must make a choice every day – individually and collectively – to drive meaningful change through our words, our deeds and our culture.
- Every day, we want every employee to feel they belong to one General Motors team.
Equal Opportunity
- General Motors is committed to being a workplace that is not only free of unlawful discrimination, but one that genuinely fosters inclusion and belonging.
- All employment decisions are made on a non-discriminatory basis without regard to sex, race, color, national origin, citizenship status, religion, age, disability, pregnancy or maternity status, sexual orientation, gender identity, status as a veteran or protected veteran, or any other similarly protected status in accordance with federal, state and local laws.
- General Motors offers opportunities to all job seekers including individuals with disabilities.
