Open Detroit Cybersecurity jobs

Summary

Leads the automaker's global cybersecurity awareness and enablement programs, with primary ownership of the phishing simulation program including campaign cadence, targeting, communications, metrics and follow-up education. The role also builds reusable toolkits and briefings so security leaders across international regions can reinforce secure behavior, delivers awareness campaigns and role-based training, and reports on program effectiveness. Partners with Communications, GRC and Threat Intelligence, and contributes to an AI-focused application security program.

Summary

Leads a team of cybersecurity execution engineers who deploy security controls, network refreshes and risk-reduction initiatives across manufacturing plants, translating enterprise security strategy into standardized site-level execution. The role partners with plant leadership, manufacturing engineering, plant IT and security operations to sequence work around production, safety and quality, and improves plant-level visibility, monitoring and resilience. Industrial, manufacturing or OT experience is preferred, and the position acts as the on-site technical liaison for plant cybersecurity work.

Summary

Leadership role heading the Secure Product Engineering pillar within GM's Product Cybersecurity organization, managing a team that embeds application and product security across the company's software portfolio. The work centers on maturing SAST, DAST, fuzzing, runtime and OS hardening and secure-SDLC guardrails for embedded vehicle software, mobile apps, and backend services, in partnership with product engineering teams. Requires 8+ years in application or product security and 4+ years leading teams; hybrid in the Detroit area and includes a company-vehicle program.

Summary

A cybersecurity leadership role running two areas of GM's Product Cybersecurity organization: offensive product security (penetration testing, red team operations, and security research) and the Product Security Operations Center. The manager leads a team of 10-plus product security engineers, owns bug bounty management and product security incident response (PSIRT), and sets the product security assessment schedule with product teams. Calls for embedded security expertise across OS, application, and hardware contexts and the ability to read and write code in multiple languages.

Summary

A senior individual-contributor consultant role in Trinity Health's information security third-party and integrated risk program, leading complex risk assessments and guiding risk treatment strategies. The work includes vendor tiering and security control evaluation across domains such as identity and access management, network, and cloud security, plus mentoring team members on higher-risk cases. Offered as a remote position emphasizing advisory influence over enterprise risk decisions.

Summary

A people-leadership role in Trinity Health's Enterprise Information Security function, leading the third-party and integrated risk management program and a team of security risk professionals. The manager owns risk identification and prioritization, KRI/KPI reporting to leadership, and GRC tooling and automation, while coordinating regulatory audits and investigations. Advertised as remote and heavily weighted toward program ownership and team development.

Summary

A product-security engineering role within General Motors' Product Cybersecurity organization, driving early security decisions through threat modeling and Threat Analysis and Risk Assessment (TARA) across embedded vehicle software, mobile experiences, and connected services. The engineer identifies product risks, defines security requirements, and provides architecture and validation teams with security rationale early in development. Automotive experience and familiarity with ISO/SAE 21434 and attack-tree methods are cited as competitive edges.

Summary

This is a security-engineering role focused on container and host-based network micro-segmentation (Illumio), including hands-on implementation with application teams, maintaining security tooling, and participating in day-to-day Cyber Security Operations Center monitoring and incident response. It is a security-operations and network-segmentation specialty rather than software development. The employer states it will not sponsor work visas, so applicants must already be authorized to work in the US.

Summary

A client-facing IT audit and cybersecurity risk advisory role at a consulting and accounting firm, delivering risk, governance, internal audit, and compliance services with a HITRUST focus. The role sits within a Risk Advisory practice serving external clients rather than an internal security team. Work location arrangements are discussed per opportunity across several U.S. offices.

Summary

This role builds AI/ML and generative AI applications aimed specifically at cybersecurity operations, covering threat detection, alert triage, vulnerability analysis, and identity analytics, and embeds secure coding and controls into the delivery pipelines. It expects hands-on software development plus integration with security tooling such as SIEM, SOAR, EDR/XDR, and IAM, along with agentic AI and LLM orchestration experience.

Summary

An embedded application-security expert aligned to specific product lines at Flagstar Financial, accountable for threat modeling, security architecture reviews, secure coding practices, and coordinating security and penetration testing from design through deployment. The role partners with technology leads, business architects, and risk managers, translating regulatory and policy requirements into control designs and serving as the escalation point for IT risk and cyber domains. It operates as a security thought leader within a product operating model rather than a generalist engineering seat.

Summary

An identity and access management security role at Ilitch Holdings (Little Caesars' parent), owning IAM governance: periodic access reviews, RBAC design, joiner/mover/leaver provisioning, and day-to-day administration of one or more IAM/IAG platforms, plus MFA/passkey and SSO integrations. It leans governance and operations — audit support, least-privilege enforcement, and compliance with NIST, SOX, ISO 27001, and PCI — over software development, and wants about four to five years in cybersecurity with hands-on identity experience (CISSP or similar a plus).

Summary

This is a cybersecurity architecture and advisory role reporting to the bank's Cybersecurity Architect Senior Manager, split roughly 40% security architecture, 50% technical leadership, and 10% research and development, designing security solutions for third-party/vendor relationships and setting security direction alongside product and solution architects. It requires 2+ years of cybersecurity architecture experience plus 6+ years each of information-security and technology-delivery experience.

Summary

Principal cybersecurity advisor (AI security) role at Optiv, operating as a client-facing, quota-carrying pre-sales advisor within a Center of Excellence: designing AI-focused security solutions, identifying AI security concerns, driving services pipeline and cross-sell, and advising client executives on AI security strategy and roadmaps. Fully remote within the continental US.

Summary

Client-facing IT audit and cybersecurity risk advisory role at a national accounting and consulting firm, with a focus on HITRUST assessments. Work involves evaluating clients' IT and security controls and helping them meet compliance and risk-management requirements.

Summary

Enterprise security architecture strategy for a self-driving-vehicle company: defining reference architectures, technical standards, and Zero Trust patterns across endpoint, network, infrastructure, and data security, and representing security on architecture review boards. An influence-and-standards architecture role rather than an operations job, tied to a fixed list of office locations including Detroit and Pittsburgh.

Summary

A build-oriented enterprise security engineering role — as comfortable in a code editor as in a security console — owning architecture and implementation of internal security controls, telemetry and log pipelines, SIEM integrations, and automation tooling at an autonomous trucking company. Explicitly not a security-operations-only job; tied to a fixed list of office locations.

Summary

A senior cybersecurity vulnerability-management engineer role at General Motors, leading vulnerability-management services across enterprise infrastructure, client endpoints, multi-cloud (Azure, AWS, GCP), and AI-security exposure. It is a senior individual-contributor role covering detection, patch coordination, remediation prioritization, and cloud workload exposure. A fit for a security engineer specializing in enterprise and cloud vulnerability management.

Summary

A staff cybersecurity engineer in Warren or Austin owning GM's enterprise PKI and secrets-management capabilities — strategy, design, implementation, and operation of trust, identity, and cryptographic infrastructure across the company.

Summary

A senior cybersecurity engineer in Warren or Austin on GM's Cybersecurity Team. Heavy Linux + cloud-native platform engineering, C++/Rust development, and AI/data-enrichment integration for security operations.

Summary

A senior cybersecurity engineer at a bank focused specifically on internet proxy and web-filtering operations, integrating automation, application and monitoring systems. The role collaborates with the Cybersecurity Operations Center on security-automation use cases and leans on knowledge of SIEM, SOAR/orchestration, and remote browser isolation or enterprise browsers. It requires 3+ years in proxy/filtering tools, is office-based, does not sponsor visas, and lists a range of 57K to 113K.

Summary

A cybersecurity IT audit manager role at Plante Moran, a public accounting and consulting firm, responsible for leading client engagements across IT risk assessments, IT internal audits, and security control evaluations from scoping through delivery. The role requires 5-7 years of technology risk or IT audit experience, CISA or CISSP preferred within one year, and 25-35% overnight travel. It is a client-facing professional services position with practice development responsibilities.

Summary

Embedded product security architect (titled Product Security Principal) at Flagstar Financial, serving as the dedicated security SME for specific product lines — owning threat modeling, security architecture reviews, secure coding standards, penetration test coordination, and regulatory control translation within the product operating model. Hands-on, product-embedded role rather than a standalone security team function.

Summary

A product-security architecture role at Visteon, owning the cybersecurity design for connected automotive cockpit and ADAS products — threat modeling, secure architecture, and security requirements across the embedded product lifecycle. It's a hybrid position based at Visteon's Van Buren Township, MI headquarters. Aimed at an embedded/automotive security specialist rather than IT/enterprise security.

Summary

A senior security software engineer on GM's Cybersecurity Team in Warren or Austin, building integration services across SIEM/EDR/IAM/SSPM/CSPM/ITSM and AI-driven detection workflows. Heavy emphasis on architecting connectors and AI-augmented investigation tooling.

Summary

Cyber and C5ISR engineering supporting the delivery of ground combat platforms, covering cyber architecture, technology evaluation, testing and compliance and executing guidance from the platform Chief Engineer and Systems Engineering Manager. Responsibilities include managing system requirements and interface allocations, coordinating architectures and design changes, leading trade studies, driving root cause corrective action on integration and test problems, producing contract data deliverables, and evaluating new cyber and C5ISR technologies for use on the platforms. A bachelor of science in engineering or a related science is expected, the work is on site in Sterling Heights, Michigan, and a Secret security clearance is required.

Summary

Cyber engineering within the C5ISR section of a combat vehicle manufacturer, responsible for cyber architecture, technology evaluation, testing and compliance across ground combat platforms. The work is largely systems engineering: developing and enforcing system requirements and interface allocations, running trade studies on system and subsystem design, building platform cyber-physical design practices, tools and training for the wider engineering organization, and overseeing verification plans through test, production and field shakedown. It is an on-site position in Sterling Heights, Michigan and requires a Secret security clearance.

Summary

Operational security analyst role focused on real-time security event monitoring and incident response, protecting both cloud and on-premises infrastructure and running threat intelligence analysis to identify the attacker, the attack type and the systems or data affected. The position sits in the Information Privacy and Security Office and works closely with the SOC, risk and privacy teams and IT programs on security defense improvements involving architecture, processes, tools and automation. Five years of experience plus a bachelor's degree or equivalent are required, with Security+, CEH, GIAC, CISM and CISSP preferred; the assignment is a day shift in the medical device security department.

Summary

A security engineering role at Henry Ford Health dedicated to emerging technologies -- AI/ML systems, IoT, medical devices, and cloud infrastructure -- rather than traditional network or endpoint security. The role requires hands-on experience with tools including Claroty xDome for medical device security, Palo Alto firewalls, Cisco ISE, Azure and AWS security platforms, and SIEM/EDR/SOAR solutions, plus at least one of: an AI certification, CISSP/CISM, or cloud architect certification. Healthcare regulatory knowledge (HIPAA, HITECH) is required.

Summary

A security architect role at Henry Ford Health focused specifically on emerging technology domains — AI/ML systems, IoT, medical devices, cloud, and edge computing — rather than traditional enterprise IT. The architect designs security frameworks and standards for these novel environments and works across IT, Enterprise Architecture, Cloud Security, and Medical Device Security teams, with healthcare regulatory compliance as a standing constraint. 8+ years of hands-on security architecture experience required; Master's preferred.

Summary

A senior cybersecurity liaison role at Henry Ford Health, acting as the dedicated security advisor embedded with specific business units — translating cybersecurity policy into business language, assessing new initiatives for security gaps, and bridging between IT security and clinical/operational leadership. Requires 10+ years of information security experience and a CISSP, CISM, or equivalent certification to be obtained within the first year.

Summary

A management role at Henry Ford Health leading the enterprise AI and cloud security program, overseeing AI/ML model security, training-data protection, inference monitoring, and cloud security architecture and operations while meeting healthcare regulatory requirements. It is a leadership seat at the emerging intersection of AI security and cloud security in a health system.

Summary

A hands-on red team lead role focused on automotive penetration testing, owning entire engagements end to end at Block Harbor, a firm specializing in vehicle cybersecurity. Beyond testing, the position involves engaging directly with customers and helping build automation for the pen-testing process. The sparse posting signals a senior practitioner comfortable driving offensive security projects independently in the automotive domain.