Principal Security Software Engineer, PKI and Secrets Management

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and spearhead the Cyber Security strategy for innovative technologies, intricate features, substantial enhancements, and key initiatives.

• Offer technical guidance to execution teams for development and integration processes.

• Remain abreast of emerging security technologies and competitive products while shaping GM's strategic direction.

• Communicate and advocate for established Cyber Security best practices.

• Engage in recruitment processes, including the development of technical questionnaires, resume evaluations, and interviews.

• Contribute to projects that may qualify for patent applications.

• Design, create, and sustain security-oriented software components, services, and tools within GM’s application ecosystem.

• Develop automation frameworks and internal platforms for secure identity, authorization, secrets management, and logging methodologies.

• Integrate security controls and checks within CI/CD pipelines, build systems, and cloud-native deployment workflows.

• Architect and implement robust, scalable security services and APIs for authentication, authorization, policy evaluation, and event ingestion.

• Collaborate with application, infrastructure, and platform engineering teams to incorporate security requirements into system and service designs.

• Conduct secure code reviews, threat modeling, and design evaluations.

• Establish and maintain security telemetry systems for logging, metrics, and alerting.

• Participate in incident response and post-incident evaluations as an engineering lead.

• Convert emerging security threats, vulnerabilities, and technologies into engineering specifications, patterns, and roadmaps.

• Provide technical mentorship on secure coding practices, design patterns, and security architecture.

⛳️ Requirements

• Bachelor’s degree or higher in Computer Science, Software Engineering, Cybersecurity, or a related technical discipline (or equivalent practical experience).

• Over 7 years of experience as a software engineer developing and managing production systems or in-house applications.

• Advanced expertise in at least one modern programming language, such as Python, Go, Java, or C++.

• In-depth knowledge of data structures, algorithms, and design patterns.

• Familiarity with AI-assisted development tools like GitHub Copilot or Cursor.

• Experience in designing, implementing, and managing services on AWS, Azure, or GCP.

• Proficient in managed cloud services and infrastructure-as-code methodologies.

• Practical experience with Docker and Kubernetes.

• Understanding of PKI, including the issuance and management of certificates.

• Knowledge of encryption practices for data at rest and in transit, as well as key/secrets management.

• Familiarity with secure coding, input validation, and common vulnerability categories such as injection, XSS, CSRF, and insecure direct object references.

• Experience collaborating with security and audit/compliance teams, translating security requirements into engineering tasks.

• Ability to plan and manage work in an Agile environment, overseeing features and services from design to production.

• Excellent written and verbal communication abilities.

• GM does not offer immigration-related sponsorship for this position; candidates must not require GM immigration sponsorship now or in the future.

🏝️ Benefits

• Bonus potential through an incentive pay program based on company performance, job level, and individual contributions.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Health Savings Account.

• Flexible Spending Accounts.

• Retirement savings plan.

• Sickness and accident benefits.

• Life insurance.

• Paid vacation and holidays.

• Tuition assistance programs.

• Employee assistance program.

• GM vehicle discounts.

• Relocation benefits for candidates who qualify under company policy.