- LocationUSA (Remote)
- Work modeRemote
- TypeFull Time
- Salary$80K/yr - $100K/yr
- Openings4
About the opportunity
General Motors is looking for a motivated and detail-oriented Junior Ethical Hacker to join its cybersecurity team. This role is designed for individuals who are passionate about cybersecurity and want to build a strong foundation in penetration testing and vulnerability assessment. You will work under the guidance of senior security engineers to identify vulnerabilities in applications, networks, and systems used across GM’s digital infrastructure. This includes internal systems, connected vehicle platforms, APIs, and cloud-based environments. This is a hands-on role where learning by doing is expected.
What you will do
- Assist in conducting penetration testing on web applications, APIs, and internal systems
- Perform reconnaissance activities such as domain analysis, subdomain enumeration, and open port scanning
- Use tools like Nmap, Burp Suite, Metasploit, Nikto, and OWASP ZAP to identify vulnerabilities
- Support vulnerability assessments and security audits across systems and networks
- Analyze security issues such as SQL injection, XSS, CSRF, authentication flaws, and misconfigurations
- Document findings clearly with proof-of-concept evidence and remediation steps
- Work closely with development teams to explain vulnerabilities and assist in fixing them
- Participate in internal security testing projects related to connected car systems and IoT devices
What we are looking for
- Completed or pursuing certifications like
- CEH (Certified Ethical Hacker)
- CompTIA Security+
- Experience with bug bounty platforms (HackerOne, Bugcrowd)
- Basic knowledge of web development (HTML, JavaScript, APIs)
- Understanding of cloud environments (AWS basics)
- Familiarity with Git and version control
Skills and experience required
- Basic understanding of networking (TCP/IP, DNS, HTTP/HTTPS)
- Familiarity with Linux operating system (Kali Linux preferred)
- Basic knowledge of cybersecurity concepts such as
- Vulnerability
- Threat vs Risk
- Understanding of OWASP Top 10 vulnerabilities
- Basic hands-on experience with tools like
- Burp Suite (Community version acceptable)
Direct referral network
Why candidate applications stand out
Applications include direct proof-of-work repositories and instructor verification endorsements.
Direct internal referral channels through enterprise partners bypass automated résumé discard filters.
A named placement coordinator preps you for each round and follows up with the hiring partner.
Your academy certificate, capstone projects and mock-interview record travel with the application.
Apply for this role
Apply: Penetration Testing
The placement team reviews every application and forwards shortlisted profiles to the hiring partner with your portfolio evidence attached.