Cybersecurity Services Analyst

The Connected Vehicle Ecosystem Cybersecurity team is directly engaged in securing end-to-end connected vehicle features. This role will provide senior technical leadership for the development and delivery of secure, globally connected vehicle applications and capabilities, with emphasis on identity and access management, cloud and mobile security, threat modeling, penetration testing, DevSecOps, cryptographic controls, and emerging AI security.

Minimum Qualifications

- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related technical field.

- 5+ years of experience in cybersecurity, security architecture, software engineering, or a closely related technical role.

- 5+ years of combined experience with cloud applications, mobile applications, APIs, identity platforms, or distributed software systems.

- Hands-on experience leading threat modeling, security architecture reviews, vulnerability analysis, or penetration testing activities.

- Hands-on experience with API security testing and vulnerability triage, including assessment of authentication, authorization, data exposure, input handling, and business-logic risks.

- Working knowledge of secure software development practices and the ability to partner effectively with engineering teams throughout the development lifecycle.

- Experience communicating technical security risks and remediation recommendations to engineering, product, and leadership stakeholders.

Preferred Qualifications

- Strong knowledge of identity and access management, including MFA, OAuth 2.0, OpenID Connect, SAML, authorization tokens, identity federation, and service identities.

- Practical expertise with cryptography and transport security, including encryption, certificates, key management, digital signatures, and mutual TLS.

- Experience securing applications and services operating in multi-cloud environments, particularly Google Cloud Platform and Microsoft Azure.

- Knowledge of one or more relevant development technologies, such as Java, Python, React, Swift, Kotlin, XML, REST APIs, and network sockets.

- Experience with API security testing and automation, including REST API assessment, authentication and authorization validation, negative testing, fuzzing, secure code review, and penetration testing.

- Experience governing security findings, policy exceptions, risk acceptances, remediation commitments, security metrics, and evidence-based closure across multiple engineering teams.

- Experience implementing or governing automated security testing within CI/CD, DevSecOps, or MLOps pipelines.

- Knowledge of connected vehicle, automotive, IoT, telematics, mobility, or other cyber-physical ecosystems.

- Experience assessing GenAI, LLM, AI-agent, RAG, or machine-learning solutions and defining security controls for their deployment.

- Relevant security certifications such as CISSP, CSSLP, CCSP, OSCP, CEH, or cloud security certifications are advantageous.

Core Competencies

- Technical leadership and sound security judgment in ambiguous, cross-domain environments.

- Risk-based prioritization and the ability to balance security, customer experience, delivery, and operational needs.

- Clear written and verbal communication, including concise executive-level risk framing.

- Collaboration across global, cross-functional, and culturally diverse teams.

- Ownership, initiative, structured problem solving, and continuous learning.