Stellantis
At a Glance
This role focuses on identifying, analyzing, and mitigating application security vulnerabilities throughout the SDLC. It supports a broader “Shift Left” cybersecurity strategy, ensuring security is integrated early in development and reinforced through DevSecOps practices.
Key Responsibilities:
Application Security & Testing
Collaboration & Enablement
Assessment & Reporting
This role is based in Auburn Hills, MI and is required to be on-site in our HQ building 5 days per week.
Basic Qualifications:
Strong understanding of:
Working knowledge of:
Preferred Qualifications:
Our Benefits — Designed with You in Mind
Comprehensive Health & Well-being Coverage
From your very first day, you'll have access to medical, dental, vision, and prescription drug coverage — ensuring you and your family stay healthy and protected.
Generous Paid Time Off
We believe in work-life balance. That's why we offer: 17+ paid holidays, including shut-down from December 24th through New Years Day every year. Vacation, float & wellbeing days, sick time and fully paid parental leave when your family needs you most.
Competitive Retirement Savings Plans
We help you plan for the future with:
Income Protection & Insurance Options
Benefit from included and optional disability, life, and other insurance programs — because your peace of mind matters.
Company Vehicle Lease Program
Eligible employees and their immediate families can enjoy company vehicle lease options with included insurance, maintenance, and unlimited mileage. Plus, take advantage of exclusive discounts on Stellantis products.
Family Building Benefit
We proudly support all paths to parenthood- including fertility and infertility treatments, adoption services, and gestational surrogacy.
Support for Your Growth and Giving Back
We believe in investing in your future and your passions:
And so much more!
When you join us, you're not just building a career — you're joining a company that supports you, inside and outside of work.
Source: Stellantis careers · View original posting
Stellantis N.V. is a multinational automotive manufacturing corporation formed on January 16, 2021, through a merger of Fiat Chrysler Automobiles and Groupe PSA. Headquartered in Amsterdam, Netherlands, Stellantis is the world's fourth-largest automaker by volume, employing around 250,000 people across more than 130 markets and operating assembly plants in over 30 countries. The company manages 14 automotive brands, including Alfa Romeo, Maserati, Jeep, and Ram, focusing on a range of vehicles from passenger cars to light commercial vehicles. Stellantis emphasizes multi-energy vehicles, offering internal combustion, hybrid, and battery electric options. Its mobility services include Free2Move and Leasys, which provide car rental and ride-sharing solutions. Stellantis is committed to sustainable mobility, investing over €30 billion in electrification and developing technologies for autonomous and connected vehicles.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
Stellantis's AppSec team structure includes an Application Security product manager. Key public-facing leaders are Priyam Jena, Application Security and IT leader, and Florent Canonne, Chief Information Security Officer. The team size is not publicly available. As of, there is 1 active AppSec job posting. Common skills and tools mentioned include Checkmarx, GitHub Advance Security, BurpSuite, SAST, DAST, IAST, Mobile, Akamai, Cloudflare, Azure Front Door, and AWS WAF. Explicit organizational charts, team size, and reporting lines were not found.
Key Initiatives
Stellantis does not have publicly available evidence of a Security Champions Program. They emphasize 'Shift left and Secure Early' and 'Coach development and supplier teams on application security'. Their vulnerability management process involves intake from SAST, DAST, IAST, Mobile, and leading WAF deployment, with a goal to 'Drive application security issues to a resolution'. They are 'implementing additional security controls in SDLC' and require 'Understanding and experience in NIST SSDF'. A 'major cybersecurity transformation initiative' is a recent focus. Detailed operational workflows, such as specific triage SLAs or a security champion charter, are not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Stellantis's site