General Motors
Staff Product Cybersecurity Engineer - Offensive Product Security
Milford, Michigan, United States of America +1 · Hybrid · Staff · Full-time · Posted Aug 7, 2026
- Location
- Milford, Michigan, United States of America
Warren, Michigan, United States of America - Experience
- 8+ years in penetration testing, product security, security research, or similar roles.
- Visa sponsorship
- GM does not provide immigration-related sponsorship for this role, now or in the future.
About the job
Conduct offensive security testing and research across GM’s embedded vehicle, mobile, backend, and product software to identify vulnerabilities and help engineering teams remediate them.
What you'll do
- Penetration-test software, systems, and product environments, including embedded, mobile, and backend platforms.
- Research product and technology risks; identify vulnerabilities and validate their impact.
- Provide actionable remediation guidance and help improve offensive methods, tooling, and testing approaches.
What they ask for
- Deep expertise in offensive security testing across applications, software, and systems.
- Experience with penetration testing, red-team activity, vulnerability research, and exploit validation.
- Familiarity with embedded security, operating system security, application security, and networking.
- Ability to read and write software in a variety of languages, communicate findings, and work with engineers on remediation.
Nice to have
- Automotive industry experience or experience in a similarly complex, deadline-driven, regulated field; direct automotive security experience across the secure SDLC.
- Published cybersecurity research or experience building custom offensive tooling or extending security-testing capabilities.
Model-written summary · the original posting is authoritative