Overview
Hybrid work environment; potential to work 4 days in office and 1 day remote
Why GMF Cybersecurity?
The GMF Cybersecurity team is tasked with the security engineering, regulatory response, third party risk, and incident response capabilities necessary to secure GM Financial, the captive auto finance subsidiary of General Motors.
Reporting directly to the CEO, our Cybersecurity team enjoys unprecedented support to deliver the highest level of security capabilities using cutting edge technologies and automating mundane tasks, allowing our teams to focus on interesting and rewarding security work.
As a part of GM, you'll have the opportunity to work on Cybersecurity projects across financial services, automotive, manufacturing, high-tech, and military industries.
We are looking for team players who want the freedom to innovate leading edge capabilities to join our growing Cybersecurity team.
The Technical Senior Principal Cyber is responsible for assessing risk, developing and delivering a comprehensive Cybersecurity program for General Motors Financial.
As a Technical Senior Principal, you will be at the forefront of systems architecture definition and implementation including applications, data and emerging technology domains.
A successful Technical Senior Principal can translate business requirements into specific systems, applications or process designs for very large, complex IT solutions.
This position requires a leader who can identify current and future risks, works well with others and performs in challenging situations, pragmatic and motivated by long-term results while addressing short-term needs.
Responsibilities
JOB DUTIES
- Design and develop automated software test plans to identify and address cybersecurity concerns, as well as develop testing processes and direct software application testing, leveraging knowledge of computer science, cybersecurity and software development principles and utilizing AWS, Azure, Jenkins, Java, Selenium and Appium
- Develop and execute test scenarios, scripts and procedures for unit, process, function, system integration and acceptance testing
- Review testing documentation, develop testing standards, define criteria for testing, analyze test results and present results to developers and end users
- Oversee Cybersecurity testing efforts including process design and standards, effort estimation, resource forecasting and risk management
- Create security requirements for applications, solutions, networks, data warehouses, data analytics, automation, cloud and borderless networks, and initiatives that use resources optimally;
through extensive knowledge of operational risks
- Participate in requirements gathering; reach a technical architecture creating validating and integrate the technical designs as blueprints for secure application, network and product development supporting business intelligence
- Adapt and transform established frameworks to aid in the maturing and optimization of security controls and services, or recommends alternatives to increase the security posture while optimizing ROI
- Engage in complicated problem resolution throughout the SDLC, including overseeing from a security perspective, the build processes, test automation and system monitoring performed by the Cybersecurity business partners
- Other duties as required
Qualifications
What makes you an ideal candidate :
- Comprehensive and detailed understanding of DevOps (Puppet, Ansible, Chef, Docker) including the tools or solutions and techniques to secure the strategy
- Comprehensive and detailed understanding of information technology, operating systems, protocols, TCP, endpoint security, databases, cloud orchestration and automation solutions
- Verifiable experience with Cloud Infrastructure security industry best practices
- Verifiable experience with Azure, AWS, Borderless Networks and Identity Awareness
- Verifiable experience with both virtual and containerized computing environments
- Verifiable experience in conducting POCs using emerging technologies
- Verifiable experience with various databases such as Oracle, MSSQL, MongoDB, Spark, HDFS, HIVE, Cloudera, Avro, Parquet or other Hadoop
- Verifiable experience with modern technology paradigms including serverless computing, Software Defined Networks, container technologies, and security controls to protect them
- Hands on knowledge of Linux / Unix, container and virtual solutions
- Network Architecture and Network Topology including LAN / WAN wireless and borderless networks
- Knowledge applying authentication solutions like SSO, Oauth, 2FA and IdAM
- Knowledge with Shell, Expect, Perl, Python and JavaScript
- Knowledge working with API's, data modeling, web services, microservices and APK's
- Knowledge of Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) models
- Knowledge of data and analytics tools including ETL, data platforms and visualization
- Excellent analytical and technical skills with expert level architecture and development
- Excellent personal skills with the ability to interact with executive stakeholders
- Implemented technical solutions to address business problems while comprehending the functions and capabilities of new technologies
Education
Bachelor's Degree or Associate Degree plus 2 additional years of relevant experience required
Experience
- 12+ years experience in the security of diverse technologies and processing environments required
- 5-7 years experience as Lead Security Architect, Network Architect, Solutions Architect or similar leadership role
- 5-7 years driving thought leadership and innovation across products required
Licenses
Relevant certifications and / or licenses required
What We Offer : Generous benefits package available on day one to include : 401K matching, bonding leave for new parents (12 weeks, 100% paid), training, GM employee auto discount, community service pay and nine company holidays.
Our Culture : Our team members define and shape our culture. We have an environment that welcomes new ideas, fosters integrity, and creates a sense of community and belonging.
Here we do more than work - we thrive.
Compensation : Competitive salary and bonus eligibility; this role is eligible for company vehicle program
Work Life Balance : Flexible hybrid work environment, 4-days a week in office
LI-WB1
Technical Senior Principal Cyber
The Technical Senior Principal Cybersecurity (TSP) is responsible for assessing risk, developing and delivering a comprehensive Cybersecurity program for General Motors Financial. As a Technical Senior Principal, you will be at the forefront of systems architecture definition and implementation incl...
Project Manager
Job Description: WestCare is seeking a skilled Project Manager in Ft. Worth, Texas, to oversee a 6-month contract project. The successful candidate will be responsible for coordinating and managing all aspects of the project, ensuring its timely completion within scope, budget, and quality standards...
Technical Writer Content Developer
Key Responsibilities:Work with Product Owners and Scrum team to document product capabilitiesCreate user guides, release notes, and other technical content for software releasesCollaborate with cross-functional teams to understand upcoming product featuresRequired Qualifications:BA/BS Degree in Engl...
Senior GRC Security Analyst (remote)
This role will support leadership in all aspects and leadership of vendor and risk management programs such as, audits, risk assessments, vendor management, policy management, and security awareness. Manage overall process to intake and respond to client security requests (i. Conduct information sec...
Operations Assistant Manager
Also assist with the hiring, training and development of store associates as delegated by the Store Manager Principal Duties and Responsibilities Assist with all store functions and day-to-day store activities as directed by the Store Manager Able to perform all opening and closing procedures in the...
Project Manager - Federal Market
As a project manager on Olsson’s Federal team, you will lead complex and challenging projects working with a variety of federal agencies, ensuring successful project deliverables and completion. Lead the execution of project plans by assembling and managing project teams, coordinating availabi...
Senior Technical Writer I
Technical content writer with administrative-level experience using Atlassian Confluence 8. To coordinate with technical teams for pending RICEFs and act as a primary point of contact for addressing complex technical issues. To understand client requirements and lead the delivery of technical soluti...
Sr Information Security Analyst ERP System (JD EDWARDS AND SAP)
Title- Sr Information Security Analyst ERP System (JD EDWARDS AND SAP). Expansion of security capabilities to take full advantage of the JDE and SAP security tools available. Provide training to other security team members on security services activities and domain knowledge, so that service delive...
Cyber Security Model Based Systems Engineer
As a Cyber Security Model Based Systems Engineer, you will play a pivotal role in the design and modeling of cyber security requirements for the Future Long Range Assault Aircraft (FLRAA) program. Bell, a pioneer in the aerospace industry, is seeking a Cyber Security Model Based Systems Engineer to ...
Operations Manager
The CERIS Operations Manager is responsible for overseeing all aspects of the department including Personnel Hiring, Quality Assurance of Product, Workflow, Maintaining the tracking of and accountability of staff regarding production standards and department expectations. Reports any issues to Opera...