- Demonstrated ability to run an end-to-end vulnerability intelligence workflow for a high-profile CVE, from initial awareness through intelligence collection, environmental relevance scoping, contextual scoring, and tailored outputs for executive and technical stakeholders.
- Ability to assess exploitability when public information is incomplete by reasoning through attack complexity, required privileges, user interaction, environmental preconditions, and the effectiveness of the control stack, then updating recommendations as PoCs and tooling emerge.
- Proven ability to respond to high-impact 0-days in critical third-party products by rapidly validating noisy intelligence, scoping exposure, recommending interim mitigations, and structuring updates during the first 24 to 72 hours.
- Ability to reconcile conflicting vulnerability data across vendors, scanners, commercial feeds, internal observations, document rationale, and establish a defensible environment-specific rating.
- Experience defining and using leadership metrics and dashboards that combine scanner, CMDB, ticketing, and threat-intelligence data to track remediation urgency, business exposure, and time-to-remediate.
- Knowledge of industrial cybersecurity frameworks, specifically ISA/IEC 62443 and NIST SP 800-82, to effectively evaluate and manage exposure.
- Knowledge in leveraging the NIST Cybersecurity Framework (CSF 2.0) and CISA Cross-Sector Cybersecurity Performance Goals (CPGs) to govern, scorecard, and align technical vulnerabilities with enterprise risk metrics


GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future. This includes direct company sponsorship, entry of GM as the immigration employer of record on a government form, and any work authorization requiring a written submission or other immigration support from the company (e.g., H1-B, OPT, STEM OPT, CPT, TN, J-1, etc).

This role is categorized as hybrid.
This means the selected candidate is expected to report to a specific location at least 3 times a week {or other frequency dictated by their manager}.

Relocation benefits are available for candidates who qualify under company policy.

 About GM
Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.