Description Hybrid: This role is categorized as hybrid. This means the successful candidate is expected to report to Warren, MI three times per week.
Job Description: The Role General Motors is seeking a Senior SaaS & AI Security Engineer to strengthen the security of our cloud-based business applications and emerging artificial intelligence capabilities. This role will operate at the intersection of SaaS security, identity, data protection, and AI risk management.
The successful candidate will help define and implement practical security controls across the SaaS and AI lifecycle-from discovery, architecture, and vendor assessment through deployment, monitoring, and continuous improvement. This is a hands-on role for someone who can translate evolving threats into scalable controls, partner effectively with engineering and business teams, and raise the organization's security maturity without slowing responsible innovation.
What You'll Do SaaS security
- Develop and mature the SaaS security program, including application inventory, security baselines, configuration standards, and continuous control monitoring.
- Assess SaaS platforms and integrations for identity, access, data protection, logging, privacy, resilience, and third-party risk.
- Partner with application owners to strengthen SSO, MFA, privileged access, service accounts, OAuth applications, and lifecycle controls.
- Identify and reduce risks associated with misconfiguration, excessive permissions, unmanaged integrations, shadow SaaS, data exposure, and insecure administrative practices.
- Support security architecture reviews, control design, exception management, and remediation tracking for SaaS solutions.
- Automate repetitive assessment, monitoring, evidence collection, and remediation workflows where appropriate.
- Develop custom AI agents and partner with the business to advance auto-remediation efforts.
- Communicate risk clearly to technical and non-technical stakeholders, including concise recommendations, tradeoffs, and decision points.
- Contribute to standards, playbooks, reference architectures, training, and security awareness for SaaS and AI users and builders.
- Stay abreast of the latest cybersecurity threats, vulnerabilities, and technological advancements, particularly in the automotive and AI domains.
- Provide mentorship and guidance to junior security engineers.
AI security - Develop and implement security controls that enable and govern sanctioned AI usage, including approved tools, users, data types, integrations, access paths, monitoring, and policy enforcement.
- Maintain visibility into approved AI use cases, models, providers, data flows, agents, tools, plugins, and associated business owners.
- Develop repeatable security review patterns for AI products.
- Partner with legal, privacy, compliance, procurement, data governance, and product teams to support responsible and secure AI adoption.
- Track the evolving AI threat landscape and convert relevant findings into actionable control improvements, detections, and engineering guidance.
Your Skills & Abilities (Required Qualifications) - Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, or a related field.
- Minimum of 7 years of experience in cybersecurity, with a significant focus on SaaS security and AI-driven security solutions.
- Strong understanding of cybersecurity principles, protocols, and best practices.
- Demonstrated experience with SaaS security concepts, including identity federation, access governance, API and OAuth security, configuration assessment, logging, and data protection.
- Working knowledge of AI/ML security risks and the ability to assess AI-enabled applications, workflows, or third-party services.
- Experience with security architecture reviews, risk assessment, or security control validation.
- Experience designing, building, and securing AI agents.
- Ability to write clear technical requirements, security standards, findings, and executive-ready risk summaries.
- Excellent communication, analytical, and problem-solving skills.
- Ability to work independently and collaboratively in a fast-paced environment.
What Will Give You A Competitive Edge (Preferred Qualifications) - Certifications such as CISSP or equivalent are highly desirable.
- Familiarity with AI security standards and guidance, such as NIST AI Risk Management Framework, OWASP Top 10 for LLM Applications, MITRE ATLAS, or comparable practices.
- Experience using security data analysis, data engineering, dashboards, or analytics to identify trends, prioritize risk, measure control effectiveness, and support security operations decisions.
Additional Information:
Relocation is not available for this role. GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future. This includes direct company sponsorship, entry of GM as the immigration employer of record on a government form, and any work authorization requiring a written submission or other immigration support from the company (e.g., H1-B, OPT, STEM OPT, CPT, TN, J-1, etc.)
About GMOur vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.
Why Join UsWe believe we all must make a choice every day - individually and collectively - to drive meaningful change through our words, our deeds and our culture. Every day, we want every employee to feel they belong to one General Motors team.
Total Rewards | Benefits OverviewFrom day one, we're looking out for your well-being-at work and at home-so you can focus on realizing your ambitions. Learn how GM supports a rewarding career that rewards you personally by visiting Total Rewards resources.
Non-Discrimination and Equal Employment Opportunities (U.S.)General Motors is committed to being a workplace that is not only free of unlawful discrimination, but one that genuinely fosters inclusion and belonging. We strongly believe that providing an inclusive workplace creates an environment in which our employees can thrive and develop better products for our customers.
All employment decisions are made on a non-discriminatory basis without regard to sex, race, color, national origin, citizenship status, religion, age, disability, pregnancy or maternity status, sexual orientation, gender identity, status as a veteran or protected veteran, or any other similarly protected status in accordance with federal, state and local laws.
We encourage interested candidates to review the key responsibilities and qualifications for each role and apply for any positions that match their skills and capabilities. Applicants in the recruitment process may be required, where applicable, to successfully complete a role-related assessment(s) and/or a pre-employment screening prior to beginning employment. To learn more, visit How we Hire.
AccommodationsGeneral Motors offers opportunities to all job seekers including individuals with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, email us [email protected] or call us at 1-800-865-7580. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.
