Cybersecurity Engineer - Vulnerability Management and Application Security

Arlington, TXPosted 10 months agoWebsite

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.

About GM Financial

General Motors (GM) is a prominent American multinational automotive corporation founded in 1908 in Flint, Michigan. Initially established as a holding company for several motorcar manufacturers, GM has grown to include well-known brands such as Buick, Cadillac, Chevrolet, and GMC. The company has a rich history of automotive innovation, including the introduction of the electric self-starter in 1912. GM focuses on the design, manufacture, and sale of automobiles and trucks, operating in 35 countries and serving a diverse global customer base. The company also engages in automotive components and related industries, including electrical parts and diesel engines. Under the leadership of CEO Mary Barra, GM is investing in future mobility technologies, such as electric vehicles and autonomous driving systems, aiming to lead the transition to sustainable transportation.

Industry

automotive

Employees

162,000

26123 engineers

Revenue

$187B

Website

Visit →

Security at GM Financial

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

Stated AppSec Mission: Develop and maintain technical security requirements, standards, and documentation.
Developer Enablement vs. Gatekeeping: Collaborate with development and operations teams to integrate security controls into DevOps workflows.
Risk Philosophy: Conduct periodic risk assessments for applications and supporting infrastructure.
Stated Pain Points or Goals: Stay current on emerging threats, vulnerabilities, and regulatory requirements impacting application security. - Explicit AppSec KPIs (e.g.

Security Team

Org Structure & Reporting Line: Cybersecurity is central to our strategic vision, so you'll benefit from exceptional leadership visibility, with direct reporting lines to the CEO.
Information Technology, Cybersecurity and Data Science teams innovate to keep our digital ecosystem fit and protected.
Key Public-Facing Leaders: Ryan Bachman, SVP / Chief Information Security Officer.
Key Quote: Chief Information Security Officer directly reporting to the CEO.
Alternate public listing: SVP Global Chief Information Security Officer.
Team Size Estimate (as_of:): LinkedIn Search Query Used: site:linkedin.com "GM Financial""security""application".
Active AppSec Job Postings (as_of:): Count: 1 - Job ID 569, "Cybersecurity Engineer - Vulnerability Management and Application Security".
Common Skill/Tool Patterns: Application Security tools (SAST, DAST, IAST), Hands-on experience with application security tools (e.g., Veracode, Checkmarx, Burp Suite, OWASP ZAP), CI/CD pipeline integration, Proficiency in scripting and automation (Python, Bash).

Key Initiatives

Security Champions Program: Status: No Evidence Found.
Shift Left in Practice: Collaborate with development and operations teams to integrate security controls into DevOps workflows.
CI/CD pipeline integration.
Vulnerability Management Process: Intake: Vulnerability Management (VM) platforms and processes.
Triage/Remediation: Perform vulnerability assessments and penetration testing for applications and systems.
Analyze findings and drive remediation efforts.
Secure SDLC Artifacts: Secure coding practices.
Knowledge of threat modeling and risk assessment methodologies.
Recent Initiatives (Last 6 Months): Evidence Found: active hiring for Application Security (Job ID 569, posted).
Other public signals of technology/innovation (company hackathon with AWS partnership) were observed on company social posts.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on GM Financial's site