jobapplier

Senior Cybersecurity Engineer (Product Security)

CHAOS Industries

Skills

Required

  • cybersecurity
  • product security
  • cloud
  • application security
  • scripting / automation
  • network
  • identity security
  • software security design
  • secure system architecture principles
  • secure software development lifecycle
  • Python / PowerShell / Bash

Preferred

  • threat modeling
  • cybersecurity risk assessments
  • embedded
  • sensor platforms / edge computing technologies
  • BIOS / UEFI
  • Hardware security design
  • Trusted Platform Module
  • TPM
  • secure boot / cryptographic hardware / supply chain

Join our team as a Senior Cybersecurity Engineer focused on Product Security. In this highly collaborative and hands-on role, you will design, assess, and secure our next-generation sensor platforms and supporting software ecosystems.

NIST 800-53

Responsibilities

  • You will work closely with various engineering teams to integrate security throughout the product lifecycle, conduct threat modeling and risk assessments, support compliance initiatives, and establish secure engineering standards.
  • This position offers a direct impact on the security and resiliency of mission-critical technologies deployed in operational environments.
  • Design and implement secure software and hardware system architectures for mission-critical platforms and supporting infrastructure.
  • Lead threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure, and conduct cybersecurity risk assessments.
  • Support cybersecurity compliance initiatives and product authorization efforts, including RMF (Risk Management Framework) and ATO (Authority to Operate).
  • Experience supporting security authorization activities such as ATO processes and security documentation development, and eMASS
  • Strong analytical, troubleshooting, and technical communication skills
  • CMMC
  • DFARS
  • Active Security Clearance

Requirements

NIST 800-171

  • Must be a U.S. Citizen eligible for government facilities and sensitive information
  • Understanding of cloud, endpoint, network, and identity security concepts
  • Experience with software security design and secure system architecture principles
  • Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts
  • 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles
  • Ability to operate effectively in a fast-paced startup environment
  • Ability to obtain additional security clearances as required by contract
  • Familiarity with cybersecurity frameworks and compliance standards including:
  • RMF
  • Experience supporting defense, aerospace, government contracting, or regulated technology environments

Experience with secure DevSecOps pipelines and automation practices

  • Familiarity with export control requirements including ITAR and EAR
  • Experience with Microsoft GCC High environments and regulated cloud architectures

Firmware development experience

  • Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent
  • Experience with scripting or automation using Python, PowerShell, or Bash

Preferred

  • The ideal candidate has experience securing complex software and hardware systems within defense, aerospace, or other highly regulated environments
  • Hands-on experience conducting threat modeling and cybersecurity risk assessments
  • Experience securing embedded systems, sensor platforms, or edge computing technologies
  • BIOS/UEFI security or development experience
  • Hardware security design experience
  • Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge

Pay

USD 135,000 - 200,000