Principal Security Software Engineer, PKI and Secrets Management
General Motors1 day ago
Remote, United StatesStaff+
Base Salary
$202k - $310k/yr
Responsibilities
- Design, build, and maintain security-focused software components, services, and tools.
- Develop automation frameworks and internal platforms for identity, authorization, secrets management, logging, and secure engineering patterns.
- Integrate security controls into CI/CD pipelines, build systems, and cloud-native deployment workflows.
- Architect and implement scalable security services and APIs for authentication, authorization, policy evaluation, and event ingestion.
- Collaborate with application, infrastructure, and platform engineering teams to embed security requirements into system designs.
- Perform secure code reviews, threat modeling, and design reviews to identify and remediate vulnerabilities.
- Build and maintain security telemetry systems for logging, metrics, alerting, detection, triage, and incident response.
- Contribute to incident response and post-incident reviews as the engineering owner for security services and tooling.
- Translate emerging security threats, vulnerabilities, and technologies into engineering requirements, patterns, and roadmaps.
- Provide technical mentorship on secure coding, design patterns, and security architecture.
- Lead cybersecurity strategy for complex technology, features, and major programs; participate in hiring, interviews, and patent-eligible projects.
Requirements
- Bachelor’s degree or higher in Computer Science, Software Engineering, Cybersecurity, or a related technical field, or equivalent practical experience.
- 7+ years of experience as a software engineer building and owning production systems or in-house applications.
- Advanced proficiency in at least one modern programming language such as Python, Go, Java, or C++.
- Experience using AI-assisted development tools such as GitHub Copilot or Cursor.
- Experience designing, implementing, and operating services on AWS, Azure, or GCP, including managed services and infrastructure-as-code.
- Hands-on experience with Docker and Kubernetes.
- Understanding of PKI, certificate issuance and management, encryption in transit and at rest, key and secrets management, secure coding, input validation, and common vulnerability classes.
- Experience partnering with security and audit/compliance teams and translating security requirements into engineering work.
- Ability to plan and manage work in an Agile environment and own services from design through production.
- Strong written and verbal communication skills for explaining identity and security concepts to technical and non-technical audiences.
- Preferred: extensive enterprise-scale PKI and cryptographic services experience, security platform modernization and automation experience, and proven technical leadership across organizations.
Benefits
- Medical, dental, vision, Health Savings Account, Flexible Spending Accounts, retirement savings plan, sickness and accident benefits, life insurance, paid vacation and holidays, tuition assistance, employee assistance program, and GM vehicle discounts.
- Remote role; candidates may be based anywhere in the country of work and are not expected to report to a GM worksite unless directed by their manager.
- Relocation benefits are available for candidates who qualify under company policy.
Categories
About General Motors
General Motors designs, manufactures, and sells cars, trucks, and electric vehicles for consumers and commercial fleets under brands including Chevrolet, GMC, Cadillac, and Buick. A public company on the NYSE headquartered in Detroit and founded in 1908, it operates globally and is developing EVs on its Ultium battery platform. Revenue comes from vehicle and parts sales, connected services such as OnStar, and financing through GM Financial.