Overland AI
Product Security Engineer
$170K–$240K
San Francisco, CA +1 · On-site · Full-time · Posted Mar 16, 2026
- Location
- San Francisco, CA
Seattle, WA - Experience
- 5+ years; no alternatives stated.
- Visa sponsorship
- Employment is contingent on the ability to comply with U.S. export control laws.
About the job
Own product security for autonomous ground vehicles and command-and-control systems, translating threats and customer requirements into security priorities, controls, verification plans, and authorization evidence.
What you'll do
- Set security priorities, lead threat modeling and risk assessments, and define actionable security requirements.
- Own the RMF and ATO/ATC process, compliance evidence, POA&Ms, and customer security coordination.
- Drive secure development and verification, including security reviews, testing, remediation, and release decisions.
What they ask for
- At least 5 years in product security, cybersecurity engineering, or a closely related field, with strategic program ownership and hands-on technical depth.
- Proven experience leading threat modeling and risk assessment for complex systems.
- Experience owning an ATO end-to-end as the responsible authority, or deep hands-on experience across every RMF/ATO phase with readiness to own it.
- Practical command of NIST 800-37, 800-53, and 800-171; DISA STIGs and SRGs; and eMASS artifact requirements, formats, and review cycles.
Nice to have
- Experience securing embedded, autonomous, or operationally deployed systems, including air-gapped and disconnected environments.
- Familiarity with CMMC, CSEIG v3.0, or FIPS 140-3 and cryptographic module validation.
Pay
USD 170,000 - 240,000 annually (base salary)
Tools
CSEIG v3.0, NIST 800-53/171, NIST 800-37, DISA STIGs, eMASS, CMMC, FIPS 140-3, ISO/SAE 21434
Model-written summary · the original posting is authoritative