Application Security Engineer

As aSenior Application Security Lead within the Off-Board  Cybersecurity team, you will play a critical role in protecting the systems that enable Ford’s connected vehicle ecosystem of products. These systems include mobile applications, cloud-native services, APIs, customer identity flows, OTA support services, EV charging platforms, fleet and commercial solutions, and other off-board capabilities that maintain the “always-on” relationship between Ford, its vehicles, and its customers.

You will help  integrating security controls into CI/CD pipelines, improving developer security workflows, performing threat modeling, advancing automated security testing, and leveraging AI-enabled techniques to increase the speed, coverage, and accuracy of security validation.

The successful candidate will work closely with software engineering teams to shift security left. You will be expected to influence technical direction, define security patterns, assess application risk, and help mature Ford’s Application Security Posture Management capabilities.

• Lead application threat modeling activities for new and existing products, services, APIs, cloud architectures, and connected vehicle use cases.
• Develop scalable threat modeling patterns, abuse cases, attack trees, and security design reviews for high-risk systems such as OTA services, mobile-to-vehicle commands, identity flows, EV charging, and fleet platforms.
• Champion the use of AI-assisted automation to improve design reviews, security testing, code analysis, vulnerability triage, test case generation, exploit path identification, pen testing and remediation recommendations.
• Partner with engineering teams to implement and optimize automated security testing capabilities, including SAST, DAST, SCA, IaC scanning, secrets detection, container scanning, API security testing, fuzz testing, and runtime security validation.
• Define and maintain application security standards, secure coding guidelines, reusable security patterns, and reference architectures for cloud-native and API-driven systems.
• Collaborate with IAM, cloud security, PKI, infrastructure, and vehicle cybersecurity teams to ensure consistent security controls across off-board and vehicle-connected services.
• Establish metrics and reporting to measure application security maturity, vulnerability aging, remediation performance, tool coverage, pipeline adoption, and risk reduction.
• Contribute to incident response and vulnerability response activities involving application-layer threats, API abuse, credential compromise, software supply chain exposure, or cloud service weaknesses.
• Mentor engineers and developers on secure design, secure coding, threat modeling, security testing, and practical remediation techniques.
• Stay current on emerging application security threats, AI-assisted attack techniques, supply chain risks, API exploitation trends, cloud-native attack patterns, and automotive cybersecurity regulations.
  

• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or a related technical field.
• Preferred: Master’s degree in Computer Science, Cybersecurity, Software Engineering, or a related technical discipline.
• Preferred: Security certifications such as CISSP, CCSP, or equivalent practical experience.
• 5+ years of experience in cybersecurity, application security, DevSecOps, software engineering, cloud security, or secure architecture.
• Strong hands-on experience with application security practices across the software development lifecycle.
• Experience implementing or operating security tools such as SAST, DAST, SCA, secrets scanning, container scanning, IaC scanning, API security testing, or vulnerability management platforms.
• Experience securing cloud-native applications, microservices, APIs, containers, and CI/CD pipelines.
• Strong understanding of secure coding principles, common vulnerability classes, and remediation techniques, including OWASP Top 10, API Security Top 10, authentication flaws, authorization issues etc.
• Experience with automation, scripting, or development using languages such as Python, Java, JavaScript/TypeScript, Go, C#, or similar.
• Ability to partner effectively with software engineering, product management, cloud, infrastructure, IAM, privacy, compliance, and cybersecurity teams.
• Strong analytical, communication, and influence skills, with the ability to explain technical risk to both engineering and leadership audiences.
• Preferred: Experience with AI-driven security automation, including LLM-assisted secure code review, automated threat modeling, intelligent vulnerability deduplication, AI-generated security test cases, or automated remediation workflows.
• Experience developing security-as-code capabilities, policy-as-code controls, pipeline gates, reusable security libraries, or paved-road developer security patterns.
• Preferred: Experience with Zero Trust Architecture, enterprise IAM, PKI, HSM/KMS integrations, or cryptographic controls for distributed systems.

You may not check every box, or your experience may look a little different from what we've outlined, but if you think you can bring value to Ford Motor Company, we encourage you to apply!

As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder…or all of the above? No matter what you choose, we offer a work life that works for you, including:

• Immediate medical, dental, and prescription drug coverage

• Flexible family care, parental leave, new parent ramp-up programs, subsidized back-up child care and more

• Vehicle discount program for employees and family members, and management leases

• Tuition assistance

• Established and active employee resource groups

• Paid time off for individual and team community service

• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day

• Paid time off and the option to purchase additional vacation time.

For a detailed look at our benefits, click here: Benefit Summary 

This position is a salary grade7 or 8. 

This position is a salary grade 7 and ranges from $99,600-$166,600., This position is a salary grade 8 and ranges from $115,000-$192,900.     

Final determination of salary grade will be based on candidate's skills and experience, and base salary will be set within the applicable range according to job scope, responsibility and competitive market value.

*Visa Sponsorship is not provided for this role*

Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire.

We are an Equal Opportunity Employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, If you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660.

#LI-Remote

#LI-GH2