Sr. Product Cybersecurity Engineer - Vehicle Security

Description

The Role

GM's Product Cybersecurity Team safeguards the security and integrity of our vehicle platforms, embedded systems, and connected services across the entire product lifecycle. Our mission is to proactively defend GM products against evolving cyber threats by engineering cybersecurity into every phase - from concept and architecture through development, validation, production, and in-field operation. We seek product cybersecurity professionals with advanced expertise in secure system design, embedded and automotive security, and risk-based threat analysis, capable of driving security-by-design principles, ensuring compliance with global regulations and standards, and strengthening the resilience of GM's vehicles and mobility ecosystems.

The Sr. Product Cybersecurity Engineer is responsible for defining, designing, and supporting the implementation, validation, and production integration of intrusion detection capabilities across vehicle electrical architecture. This role sits at the intersection of vehicle networking, embedded systems, and cybersecurity engineering, enabling detection and reporting of malicious or anomalous in-vehicle behavior.

In this role, you will collaborate closely with product cybersecurity teams, ECU owners, suppliers, and system engineering to deliver an end-to-end, production-ready IDS solution that aligns with automotive cybersecurity standards and regulatory requirements.

What You'll Do

• Define and maintain IDS requirements, use cases, and detection objectives across vehicle platforms and network domains.
• Contribute to the design of in-vehicle IDS architectures, including sensor placement, data collection, and analysis flows.
• Translate threat models, attack paths, and misuse cases into concrete detection logic, rules, and/or model requirements.
• Partner with ECU owners, system architects, and suppliers to integrate IDS capabilities into ECUs, gateways, and central compute platforms.
• Specify and refine IDS interfaces, data formats, and logging requirements for alerts, diagnostics, and backend consumption.
• Support implementation, integration, and validation activities through lab testing, test vehicle evaluations, and trace analysis.
• Analyze IDS performance (coverage, fidelity, false positives/negatives) and drive tuning and improvements into the production solution.
• Ensure IDS design and implementation align with internal cybersecurity processes and external standards/regulations (e.g., ISO/SAE 21434, UN R155).
• Develop and maintain engineering documentation, including specifications, design descriptions, and test plans.
• Provide technical guidance and reviews for internal teams and suppliers on IDS-related topics.

• Bachelor's degree in Computer Engineering, Electrical Engineering, Computer Science, or a related technical field.
• Solid experience in embedded systems and/or vehicle networking (e.g., CAN, LIN, Automotive Ethernet, SOME/IP, UDS ).
• Strong foundation in cybersecurity principles , including threat modeling, attack surfaces, and defense-in-depth for embedded/vehicle systems.
• Ability to interpret and apply automotive cybersecurity standards and regulations (e.g., ISO/SAE 21434, UN R155 ) to engineering designs.
• Experience with microcontroller-based systems and embedded operating systems, including AUTOSAR architecture and Linux-like environments.
• Knowledge of software and hardware design .
• Ability to reconcile future IDS program enhancements with near-term execution to identify design and implementation issues.
• Proficient in at least one of the following programming languages: C, C++, Python, Go, or Java.
• Strong analytical, problem-solving, and communication skills, with the ability to clearly document and review technical designs.
• Ability to handle ambiguity and make decisions and recommendations with limited data.