Senior Manufacturing Cybersecurity Engineer – Vulnerability Exposure Management (OT)

Location: Hybrid in Warren, Michigan, United States; expected to report to the location at least 3 times per week.

Company

hirify.global develops automotive products and pursues a vision of zero crashes, zero emissions, and zero congestion.

What you will do

• Lead vulnerability and exposure management across manufacturing IT/OT, ICS, and plant-floor environments while maintaining safe, reliable production.
• Correlate vulnerability, asset, CMDB, network, telemetry, identity, SBOM, business, and threat-intelligence data to produce plant-aware risk priorities.
• Evaluate exploitability, asset criticality, production impact, safety, segmentation, mitigations, solution complexity, vendor support, and maintenance constraints.
• Map exposures to affected hardware or software, accountable owners, recommended remediation, and target dates; coordinate risk-informed mitigation with plant IT and automation engineers.
• Support response to actively exploited and high-impact ICS vulnerabilities, and establish KPIs, dashboards, and executive reporting.
• Build AI capabilities for asset-context enrichment, attack-path and risk prioritization, and remediation workflow automation; provide technical leadership and mentoring.

Requirements

• Bachelor’s degree in cybersecurity, computer science, engineering, information technology, or a related field, or equivalent practical experience.
• Experience in cybersecurity engineering, vulnerability management, security operations, manufacturing IT/OT, ICS, infrastructure security, or related domains, including large-scale enterprise automotive or manufacturing operations.
• Working knowledge of PLCs, robots, HMIs, industrial automation, engineering workstations, and plant-floor systems.
• Experience evaluating third-party OEM software and firmware updates and coordinating securely with external field engineering vendors.
• Knowledge of industrial networking and protocols, including IECN/PFCN environments, Industrial Ethernet, EtherNet/IP, DeviceNet, Profibus, or comparable technologies.
• Experience prioritizing vulnerabilities where patching is constrained by safety, production, availability, vendor support, or maintenance windows; knowledge of CVSS, EPSS, CISA KEV, exploit maturity, active exploitation, attack paths, and risk-based prioritization.
• Experience with remediation governance, exception management, dashboards, metrics, executive reporting, and continuous improvement in a mature vulnerability management program.
• Experience correlating vulnerability findings with business, asset, identity, telemetry, network, SBOM, and threat-intelligence context; experience designing compensating controls and alternative mitigations when immediate patching is not possible.
• Familiarity with Armis, Claroty, Tenable, Qualys, Dragos, network segmentation, VLANs, and plant-floor port configurations; ability to work independently, solve ambiguous problems, and communicate data-supported recommendations.

Nice to have

• Experience running end-to-end vulnerability intelligence workflows for high-profile CVEs and assessing exploitability when public information is incomplete.
• Experience responding to high-impact 0-days in critical third-party products, including exposure scoping, interim mitigations, and updates during the first 24 to 72 hours.
• Experience reconciling conflicting vulnerability data and defining leadership metrics and dashboards using scanner, CMDB, ticketing, and threat-intelligence data.
• Knowledge of ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0, and CISA Cross-Sector Cybersecurity Performance Goals.

Culture & Benefits

• Hybrid work arrangement with regular reporting to the Warren location.
• Relocation benefits are available for candidates who qualify under company policy.
• Full employee benefits and total rewards are provided.
• GM promotes an inclusive workplace and equal employment opportunities.

Hiring process

• GM does not provide immigration-related sponsorship; applicants requiring current or future GM immigration sponsorship, including H-1B, OPT, STEM OPT, CPT, TN, or J-1 support, should not apply.
• Applicants may be required to complete role-related assessments and pre-employment screening where applicable.