Senior Security Engineer

About Ford Motor Company

We are the movers of the world and the makers of the future. We get up every day, roll up our sleeves and build a better world -- together. At Ford, we’re all a part of something bigger than ourselves. Are you ready to change the way the world moves?

About the Electric Vehicles, Digital and Design (EVDD) Team

Ford’s Electric Vehicles, Digital and Design (EVDD) team is charged with delivering the company’s vision of a fully electric transportation future. EVDD is customer-obsessed, entrepreneurial, and data-driven and is dedicated to delivering industry-leading customer experience for electric vehicle buyers and owners. You’ll join an agile team of doers pioneering our EV future by working collaboratively, staying focused on only what matters, and delivering excellence day in and day out. Join us to make positive change by helping build a better world where every person is free to move and pursue their dreams.

The Role: Senior Security Engineer

The Ford Vehicle-Cloud and Mobile Operations (VCMO) team oversees the Ford Connected Vehicle Cloud, including the Transportation Mobility Cloud (TMC) and its integrated application ecosystem. TMC serves as Ford’s global Connected Vehicle Cloud Platform, supporting over 24 million vehicles in production worldwide.

As a Senior Security Engineer, you will work closely with Cloud Engineering teams to ensure that VCMO services and platforms are designed and maintained with the highest security standards, protecting Ford’s customers and their data.

Key Responsibilities

• Architect and implement robust application security controls throughout the software development process across 200+ external and internal services.
• Ensure the delivery of secure, reliable, and confidential products and services through adherence to best practices.
• Monitor cloud environments for security threats, vulnerabilities and suspicious activities.
• Investigate and respond to Security incidents and alerts in real-time.
• Maintain vulnerability identification, assessment, and remediation across infrastructure and code.
• Work with Engineering development teams to remediate vulnerabilities promptly.
• Integrate security guardrails into build and deployment processes to prevent vulnerable code from reaching production.
• Translate Engineering and Security needs into clear, well-defined functional and technical requirements backed by data analysis and deep understanding of the platform security landscape.
• Collaborate with cross-functional teams to improve the security posture of Connected Vehicle Cloud and design Security into platforms and products.
• Document Security Procedures, playbooks and guidelines.
• Ensure alignment with internal Ford policies, and industry regulations and standards (adherence to relevant security framework such as SOC2, ISO27001).
• Develop and manage key security operational metrics, ensuring their success and implementing action plans, including necessary remediations.

Qualifications

You'll have...

• Bachelor's degree or equivalent combination of relevant education and experience.
• 6 years experience in a security engineering role, with experience in implementing effective vulnerability management strategies to mitigate risks.
• 3 years experience applied cloud security knowledge of AWS, GCP.
• 1 year experience with automation and scripting using languages such as Python, Go, and Bash (shell scripting).
• 1 year experience in security standards and compliance regulations such as ISO 27001, SOC2, and GDPR.

Even better, you may have...

• Experience security in IOT and Device management systems.
• Experience with PKI and Certificate services.
• Strong analytical skills to produce and interpret security data and trends.
• Demonstrated experience securing CI/CD pipelines in Kubernetes environments.

What Ford Offers

As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder…or all of the above? No matter what you choose, we offer a work life that works for you, including:

• Immediate medical, dental, vision and prescription drug coverage.
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more.
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more.
• Vehicle discount program for employees and family members and management leases.
• Tuition assistance.
• Established and active employee resource groups.
• Paid time off for individual and team community service.
• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day.
• Paid time off and the option to purchase additional vacation time.

Key skills/competency

• Application Security
• Cloud Security (AWS, GCP)
• Vulnerability Management
• Incident Response
• Security Architecture
• CI/CD Security
• Compliance (ISO 27001, SOC2, GDPR)
• Scripting (Python, Go, Bash)
• Data Protection
• Kubernetes Security