Manager, Secure Product Engineer
HybridWarren, Michigan, United States or Milford, Michigan, United States
Job Summary
Lead a team of product cybersecurity engineers focused on secure software and systems engineering. Define and evolve a robust set of secure engineering services and capabilities for GM products, including embedded vehicle software, mobile experiences, and key services. Establish close partnerships with product engineering teams to support secure implementation and mature SAST, DAST, fuzzing, runtime security, and OS security hardening for core code bases. Formalize technical guidance, reusable patterns, and security guardrails across product environments while partnering with adjacent teams to improve tooling and embed security requirements into engineering workflows. This role requires 8+ years of cybersecurity experience and 4+ years of leadership, with a hybrid schedule of at least three days in-office.
Required Qualifications
- 8+ years of cybersecurity experience in application security, product security, or similar domains
- 4+ years of leadership experience in relevant security or engineering-focused roles with direct team ownership
- Expertise in application security, secure software engineering, and providing practical technical guidance
- Experience with SAST, DAST, fuzzing, code review, and secure SDLC workflows across platforms
- Ability to read and write software in multiple programming languages to support team execution
- Demonstrated success working closely with engineering teams to materially improve security without unnecessary friction
- A high-ownership leadership style with strong product instincts and a pragmatic security mindset
- A commitment to internal customer partnership and technically credible security support
- Deep technical expertise that enables clear guidance, strong mentorship, and opinionated planning
- Ability to manage multiple complex priorities with clear milestones and measurable outcomes
- A bias toward scalable improvement that continually strengthens Secure Product Engineering
- This role is categorized as hybrid
- This means the selected candidate is expected to report to a specific location at least 3 times a week {or other frequency dictated by their manager}
Desired Qualifications
- Prior experience in the automotive industry or a similarly complex, deadline-driven, and regulated field
- Published cybersecurity research (e.g., conference talks, blog posts, or public code repositories)
- Familiarity with embedded software/OS security, mobile applications, and backend development
- Experience building custom security tooling and/or extending functionality in related technologies
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.