Senior Engineer, Product Security
Core
Own the RMF and ATO lifecycle, define security architecture, and lead threat modeling for autonomy, embedded, and command-and-control systems.
Role type
Senior IC product security engineer (defense/aerospace)
Builds
Secure hardware and software systems with secure-by-design controls
Domain
Defense, aerospace, embedded systems, and command-and-control
Required skills
RMF/ATO lifecycle management, security architecture design, threat modeling, risk assessment, DISA STIG implementation, software supply-chain security, SBOM management, SAST/DAST, CI/CD pipeline security, systems engineering traceability, cryptographic module validation, secure boot, signed firmware
Preferred skills
CMMC familiarity, ISO/SAE 21434, IEC 62443, offensive security, C/C++/Python/ARM/x86/cryptography
Technologies
NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, eMASS, FIPS 140-3, TPM/HSM, CI/CD, SAST, DAST
Responsibilities
Own RMF and ATO lifecycle including control selection, tailoring, implementation tracking, POA&Ms, evidence, and authorization reviews; Act as security SME and primary interface with government cyber or program offices; Define security controls, requirements, solutions, mitigations, and secure-by-design direction across hardware and software; Write and trace security requirements through systems-engineering reviews, design reviews, verification, and validation; Lead threat modeling and risk assessments for autonomy, embedded, and command-and-control systems; Evaluate, tailor, communicate, and defend DISA STIG applicability and implementation approaches; Own solutioning and implementation verification for security monitoring, logging, detection, secure updates, CVE management, and vulnerability remediation; Partner on software supply-chain security, SBOMs, secure SDLC practices, SAST/DAST, code review, CI/CD, and DevSecOps pipeline improvements; Audit embedded and application code for vulnerabilities and collaborate with systems, safety, test, DevOps, engineering, and vendors
Seniority
Senior, hands-on IC
