> Markdown version of [/jobs/ext/2872789-sr-security-software-engineer-security-operations](https://www.wearedevelopers.com/jobs/ext/2872789-sr-security-software-engineer-security-operations). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Security Software Engineer - Security Operations - **Company:** General Motors - **Location:** Warren, MI, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Application Integration Architecture, Automation of Tests, Microsoft Azure, Cloud Computing, Profiling, Cyber Security, Continuous Integration, Information Engineering, Extract Transform Load (ETL), Identity and Access Management, JSON, Open Source Technology, Security Software, Security Information and Event Management, Software Deployment, Data Streaming, Syslog, YAML, Feature Engineering, Large Language Models, Prompt Engineering, Software Security, Mitre Att&ck, Cloudformation, Cybercrime, Bicep, Machine Learning Operations, Api Design, Terraform, Security Orchestration, Automation & Response, Programming Languages, Microservices - **Published:** September 13, 2026 - **Apply:** https://generalmotors.wd5.myworkdayjobs.com/Careers_GM/job/Warren-Michigan-United-States-of-America/Sr-Security-Software-Engineer---Security-Operations-Engineering_JR-202601612 ## About the Role * 5-7 years in software security engineering; advanced proficiency in modern programming languages. * Expert in API development, microservices, event streaming, and idempotent integration patterns. * Experience deploying software using any modern CI/CD pipeline and automated delivery practices. * Hands-on with security tooling integrations (e.g., SIEM, EDR, SSPM). * Proven AI integration experience: LLM agents, embeddings, vector databases, RAG, prompt engineering. * Cloud proficiency (Azure/AWS/GCP) and IaC (Terraform/Bicep/ARM/CloudFormation). * Data engineering fluency: ETL/ELT, schema design, normalization/enrichment; formats (JSON, YAML, syslog, STIX/TAXII). * Excellent cross-functional communication; ability to lead small teams through delivery. What Will Give You a Competitive Edge (Preferred Qualifications) * Experience extending vendor SDKs/plugins; contributions to open-source (security/AI). * Security data modeling (MITRE ATT&CK mappings, entity graphs) and knowledge stores. * Familiarity with Semantic Kernel/LangChain, feature engineering, or lightweight MLOps. ## Description GM's Cybersecurity Team safeguards the company's global information assets, networks, and infrastructure. Our mission is to proactively defend GM against evolving cyber threats through strategic leadership, technical excellence, and innovative risk management. We seek cybersecurity professionals with advanced expertise, capable of driving enterprise security initiatives and influencing organizational resilience. As a Senior Security Software Engineer, you will design, lead, and deliver secure, scalable integration services that connect our cyber ecosystem (SIEM, EDR, IAM, SSPM, CSPM, ITSM, cloud) and activate AI/LLM capabilities to accelerate detection, response, and risk management. You will drive architecture for critical services, mentor developers, and partner across SecOps, SOC, Platform, and Data teams to ship measurable outcomes. What You'll Do * Own architecture & delivery for complex integration services (APIs, microservices, event-driven workflows) with production SLIs/SLOs. * Build AI-driven workflows (RAG, summarization, classification, agents) that augment investigations, triage, and orchestration. * Create reusable connectors bridging SIEM/EDR/IAM/SSPM/ITDR/ITSM and cloud telemetry with robust error handling, retries, and DLQs. * Implement security automation (SOAR-like playbooks) that enrich alerts and trigger deterministic + AI-assisted responses. * Harden and observe services with CI/CD, automated testing, performance profiling, metrics, and incident runbooks. * Mentor engineers and lead technical design reviews, coding standards, and reference implementations. * Translate requirements into clear epics/roadmaps; align stakeholders and deliver on time with quality., This role is categorized as hybrid. This means the selected candidate is expected to report to a specific location at least 3 times a week {or other frequency dictated by their manager}. ## Related Videos - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) ## Related Articles - [How software is steering vehicle technology](https://www.wearedevelopers.com/magazine/515-how-software-is-steering-vehicle-technology) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)