General Motors
Senior SaaS & AI Cyber Security Engineer
Warren, Michigan, United States of America · Hybrid · Senior · Full-time · Posted Oct 29, 2026
- Experience
- Minimum of 7 years in cybersecurity, with a significant focus on SaaS security and AI-driven security solutions.
- Education
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, or a related field.
- Visa sponsorship
- GM does not provide immigration-related sponsorship for this role now or in the future, including direct sponsorship and work authorization requiring company immigration support.
About the job
Strengthen security across GM’s SaaS applications and AI capabilities by designing and implementing controls throughout their lifecycles.
What you'll do
- Develop and monitor SaaS security controls, including application inventory, configuration standards, identity protections, and remediation workflows.
- Create and govern security controls for approved AI use, assess AI products, and collaborate with business and risk partners on responsible adoption.
- Conduct security reviews, communicate risks and recommendations, and mentor junior security engineers.
What they ask for
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, or a related field.
- Minimum of 7 years of cybersecurity experience, with a significant focus on SaaS security and AI-driven security solutions.
- Experience with SaaS security concepts, AI/ML security risks, security architecture reviews or risk assessment, and designing, building, and securing AI agents.
- Strong cybersecurity fundamentals and ability to write clear technical requirements, standards, findings, and executive-ready risk summaries.
Nice to have
- CISSP or equivalent certification.
- Familiarity with NIST AI Risk Management Framework, OWASP Top 10 for LLM Applications, MITRE ATLAS, or comparable practices; security analytics experience.
Tools
SSO, MFA, OAuth, NIST AI Risk Management Framework, OWASP Top 10 for LLM Applications, MITRE ATLAS
AI focus
Develop and secure AI agents; establish controls and visibility for sanctioned AI tools, models, data flows, integrations, and use cases; assess AI products and evolving AI threats; support auto-remediation and responsible AI adoption.
Model-written summary · the original posting is authoritative