Senior DoD Product Security Engineer - 174349

Responsibilities: Lead RMF and ATO activities for assigned DoD programs through successful authorization. Define security architectures, control implementations, and cybersecurity requirements across software and hardware systems. Partner with engineering teams to incorporate security requirements throughout product design and development. Develop and maintain SSPs, POA&Ms, security evidence packages, and authorization artifacts. Conduct threat modeling, risk assessments, and attack surface analysis for autonomous and embedded systems. Serve as a DISA STIG subject matter expert and translate security requirements into engineering solutions. Oversee vulnerability management, security monitoring, logging, and remediation activities. Support SBOM generation, software supply-chain security initiatives, and secure SDLC processes. Review application, firmware, and embedded systems for vulnerabilities and compliance risks. Act as a primary cybersecurity interface for government customers, assessors, and program leadership. Required Qualifications Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related technical field. 5+ years of cybersecurity, product security, systems security, or security engineering experience. Hands-on experience supporting DoD RMF and ATO lifecycle activities. Strong knowledge of NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, and eMASS. Experience securing embedded, autonomous, disconnected, or mission-critical operational systems. Ability to develop technical security requirements and communicate effectively with engineering organizations. Experience with vulnerability management, SBOMs, software supply-chain security, and secure SDLC practices. Familiarity with SAST, DAST, code reviews, CI/CD pipelines, and DevSecOps methodologies. Knowledge of cryptographic technologies, secure boot architectures, signed firmware, and key management solutions. Preferred Qualifications Experience owning and maintaining a DoD ATO through the complete authorization lifecycle. Familiarity with CMMC compliance requirements. Working knowledge of ISO/SAE 21434 and/or IEC 62443 security frameworks. Experience securing industrial, embedded, disconnected, or operational technology environments. CISSP, Security+, CASP+, or comparable cybersecurity certifications. Experience with offensive security testing, fuzzing, exploit development, reverse engineering, or vulnerability research. Hands-on programming experience with C, C++, Python, ARM, x86, and secure software development practices. Qualifications: Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related technical field. 5+ years of cybersecurity, product security, systems security, or security engineering experience. Hands-on experience supporting DoD RMF and ATO lifecycle activities. Strong knowledge of NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, and eMASS. Experience securing embedded, autonomous, disconnected, or mission-critical operational systems. Ability to develop technical security requirements and communicate effectively with engineering organizations. Experience with vulnerability management, SBOMs, software supply-chain security, and secure SDLC practices. Familiarity with SAST, DAST, code reviews, CI/CD pipelines, and DevSecOps methodologies. Knowledge of cryptographic technologies, secure boot architectures, signed firmware, and key management solutions. Preferred Qualifications Experience owning and maintaining a DoD ATO through the complete authorization lifecycle. Familiarity with CMMC compliance requirements. Working knowledge of ISO/SAE 21434 and/or IEC 62443 security frameworks. Experience securing industrial, embedded, disconnected, or operational technology environments. CISSP, Security+, CASP+, or comparable cybersecurity certifications. Experience with offensive security testing, fuzzing, exploit development, reverse engineering, or vulnerability research. Hands-on programming experience with C, C++, Python, ARM, x86, and secure software development practices. Compensation: & Benefits Salary Range: $145,000 - $175,000 Comprehensive benefits package including: Cigna Medical, Dental, and Vision 401(k) Paid Holidays Sick Leave (where required by law) Additional company-sponsored benefits