Senior Product Security Engineer

What you'll do

• Integrate security into system architectures and the software development lifecycle; review designs and document secure engineering standards.
• Conduct threat modeling and risk assessments, identify attack surfaces, and help engineering teams prioritize and remediate risks.
• Support security testing, compliance and authorization activities, including RMF, ATO, security documentation, and audits.

What they ask for

• 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles.
• Experience with software security design or secure system architecture, and hands-on support for threat modeling and cybersecurity risk assessments.
• Knowledge of secure software development lifecycle practices, application security, and frameworks or standards including RMF, NIST 800-53, NIST 800-171, and DFARS.
• U.S. Citizen eligible to work in government facilities and handle sensitive information; able to obtain additional security clearances as required by contract.

Nice to have

• Active Security Clearance; experience in defense, aerospace, government contracting, or highly regulated technology environments.
• Firmware or BIOS/UEFI security or development experience; knowledge of TPM, secure boot, cryptographic hardware, or supply chain security; security certifications such as CISSP, CSSLP, GSEC, or Security+.

Pay

$123,000 - 211,000 USD base salary

Tools

RMF, NIST 800-53, NIST 800-171, DFARS, eMASS, BIOS/UEFI, TPM