Cyber Security Engineer

Role overview

Cyber Security Engineer (Cybersecurity Risk Engineering)

You will engineer vulnerability risk solutions to reduce Ford’s operational, cyber, and resilience risk at enterprise scale. The role emphasizes solution engineering—turning vulnerability intelligence, risk frameworks, policies, and controls into practical, automatable, scalable safeguards across complex cloud and enterprise environments.

Responsibilities

• Engineer end-to-end vulnerability risk solutions: from exposure discovery through remediation workflow design and executive risk reporting
• Translate security requirements, policies, and standards into implementable technical patterns, guardrails, and reference architectures
• Prioritize and influence design decisions using risk impact concepts such as blast radius and recovery dependencies
• Partner with platform, cloud, security, and SRE teams to embed risk controls in infrastructure and pipelines
• Evaluate control effectiveness using technical signals and evidence (not only procedural compliance)
• Support initiatives across vulnerability management, including:
  • vulnerability discovery and exposure analysis
  • remediation workflow design
  • secure cloud architectures and isolated recovery environments
  • identity and access hardening and infrastructure resilience
• Provide technical guidance on risk tradeoffs, recovery sequencing, and dependency-aware design
• Work across the vulnerability management stack (e.g., scanners, asset/exposure data, prioritization models, remediation tracking, exception workflows, executive reporting)

Requirements

• 7+ years in engineering/security engineering, platform engineering, SRE, vulnerability management, or technical risk roles
• Strong ability to design and influence technical solutions across cross-functional teams
• Hands-on experience with vulnerability management practices

Nice to have

• Master’s degree in a related technical field (preferred)