Senior SaaS & AI Cyber Security Engineer
General Motors (GM)Job Description Hybrid: This role is categorized as hybrid. This means the successful candidate is expected to report to Warren, MI three times per week. Job Description: The Role General Motors is seeking a Senior SaaS & AI Security Engineer to strengthen the security of our cloud-based business applications and emerging artificial intelligence capabilities. This role will operate at the intersection of SaaS security, identity, data protection, and AI risk management. The successful candidate will help define and implement practical security controls across the SaaS and AI lifecycle—from discovery, architecture, and vendor assessment through deployment, monitoring, and continuous improvement. This is a hands-on role for someone who can translate evolving threats into scalable controls, partner effectively with engineering and business teams, and raise the organization’s security maturity without slowing responsible innovation. What You'll Do SaaS security Develop and mature the SaaS security program, including application inventory, security baselines, configuration standards, and continuous control monitoring. Assess SaaS platforms and integrations for identity, access, data protection, logging, privacy, resilience, and third-party risk. Partner with application owners to strengthen SSO, MFA, privileged access, service accounts, OAuth applications, and lifecycle controls. Identify and reduce risks associated with misconfiguration, excessive permissions, unmanaged integrations, shadow SaaS, data exposure, and insecure administrative practices. Support security architecture reviews, control design, exception management, and remediation tracking for SaaS solutions. Automate repetitive assessment, monitoring, evidence collection, and remediation workflows where appropriate. Develop custom AI agents and partner with the business to advance auto-remediation efforts. Communicate risk clearly to technical and non-technical stakeholders, including concise recommendations, tradeoffs, and decision points. Contribute to standards, playbooks, reference architectures, training, and security awareness for SaaS and AI users and builders. Stay abreast of the latest cybersecurity threats, vulnerabilities, and technological advancements, particularly in the automotive and AI domains. Provide mentorship and guidance to junior security engineers. AI security Develop and implement security controls that enable and govern sanctioned AI usage, including approved tools, users, data types, integrations, access paths, monitoring, and policy enforcement. Maintain visibility into approved AI use cases, models, providers, data flows, agents, tools, plugins, and associated business owners. Develop repeatable security review patterns for AI products. Partner with legal, privacy, compliance, procurement, data governance, and product teams to support responsible and secure AI adoption. Track the evolving AI threat landscape and convert relevant findings into actionable control improvements, detections, and engineering guidance. Your Skills & Abilities (Required Qualifications) Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, or a related field. Minimum of 7 years of experience in cybersecurity, with a significant focus on SaaS security and AI-driven security solutions. Strong understanding of cybersecurity principles, protocols, and best practices. Demonstrated experience with SaaS security concepts, including identity federation, access governance, API and OAuth security, configuration assessment, logging, and data protection. Working knowledge of AI/ML security risks and the ability to assess AI-enabled applications, workflows, or third-party services. Experience with security architecture reviews, risk assessment, or security control validation. Experience designing, building, and securing AI agents. Ability to write clear technical requirements, security standards, findings, and executive-ready risk summaries. Ex…