GM Financial · 9 hours ago
Principal Cybersecurity Engineer, Threat and Vulnerability
Irving, TX
Full-time
Hybrid
Lead/Staff
10+ years expGM Financial is focused on innovation in the cybersecurity domain, providing a mission-driven environment for its specialized teams. The Principal Cybersecurity Engineer will be responsible for managing vulnerabilities across IT infrastructure, business applications, and cloud environments, ensuring risks are assessed and mitigated effectively.
Finance
Responsibilities
Support technical direction for vulnerability and scanning supporting technology
Build and maintain scalable vulnerability detection rules, alerts, scripts, and triage pipelines
Monitor and assess the company’s cybersecurity risks and implement mitigation strategies to address vulnerabilities
Conduct continuous discovery and vulnerability assessment of enterprise-wide assets, including vulnerability scans in support of operational matters (non-scheduled)
Serve as a technical escalation point for vulnerability management and remediation efforts
Build and apply protective mitigations teams to integrate fixes upstream, and to support remediation efforts to close vulnerability exposure to new threats
Interpret complex data from vulnerability scans to pinpoint potential security risks and weaknesses
Examine disclosed vulnerabilities, threat scenarios, and mitigating controls
Implement technical recommendations for addressing and mitigating identified vulnerabilities
Perform technical analysis of all scan results and provide a report of analysis as required
Qualification
Required
Experience with leading initiatives from start to finish
Strong knowledge of business acumen and a deep understanding of business implications of decisions
Strong understanding of company values, mission, vision and strategic direction
Thorough knowledge of GM Financial's business operations
Recognized as a subject matter expert in area(s) of specialty
Experience in threat modeling, secure design, and code review processes
Demonstrated knowledge of Windows, Linux, Unix, and other operating system's vulnerabilities and ways to stop and/or mitigate
Demonstrated Knowledge on how to protect against ransomware threats
Experience building and utilizing highly scalable platforms and tools (e.g., Vulnerability scanners, detection pipelines, analytics systems)
Ability to aggregate and report on data, utilizing data visualization techniques
Experience securing hybrid/multi cloud environments (Azure, AWS)
Experience building vulnerability tooling and automations integrated into workflows
Understanding of the vulnerability risk landscape and its impact on cyber threats
Working experience prioritizing vulnerability remediation
Experience performing risk assessments of vulnerabilities and evaluating compensating and mitigating controls
Experience building and operating Vulnerability Management, Threat Intelligence, or other security programs
Knowledge of secure coding practices and application security testing (SAST, DAST, SCA, IaC, etc)
Experience with Python, REStREST, Node, SWL, and understanding of one or more VM scanners and other popular coding languages
Familiarity of computer networking operations, TCP/IP networking, network fabrics, OSI layers, and corporate networking devices and their operating systems
Familiarity with TCP/IP networking
Comfortability with DevSecOps and Comfortability with CI/CD methodologies and container security
Familiarity with securing container-based systems (Docker, Kubernetes, etc)
Understanding of CVE, CVSS scoring, CWE, MitRE ATT&CK Framework, threat intelligence, and CISA
Possess strong analytical, written, and verbal communication and documentation skills
Greater than 10 years of experience in related function required
3-5 years of experience leading through mentorship in related field required
3-5 years of experience leading projects and initiatives through influence required
High School Diploma or equivalent required
Associate's Degree or High School Diploma plus 2 additional years of related experience required
Related certifications and/or licenses required
Preferred
Member of and recommendation by accredited association in related field preferred
Benefits
401K matching
Bonding leave for new parents (12 weeks, 100% paid)
Training
GM employee auto discount
Community service pay
Nine company holidays
Company
GM Financial
GM Financial is the captive finance company and a wholly-owned subsidiary of General Motors Company.
5001-10000 employees
H1B Sponsorship
GM Financial has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (101)
2024 (91)
2023 (86)
2022 (81)
2021 (55)
2020 (50)
Funding
Current Stage
Late StageTotal Funding
unknown2010-09-29Acquired
Leadership Team
Katie DeGraaf
Senior Vice President, OnStar Insurance, Product & Telematics
Ross Reichardt
Chief of Staff; General Motors Insurance
Recent News
2025-11-12
2025-11-04
2025-10-10
Company data provided by crunchbase