Product Security EngineerZachary Piper Solutions is seeking a Product Security Engineer to support a leading Defense Technology Company focused on autonomous systems and advanced technologies supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD. The Product Security Engineer will support cybersecurity initiatives across autonomous vehicle platforms and mission-critical defense programs, helping to ensure products meet security, compliance, and operational requirements throughout the development lifecycle.
Responsibilities of the Product Security Engineer Include:- Support product security initiatives across autonomous vehicle platforms and defense technology programs.
- Assist with DoD RMF, ATO, and IATT activities, including security documentation, control implementation, POA&M management, and coordination with government stakeholders.
- Perform security assessments, vulnerability analysis, and security reviews throughout the software and hardware development lifecycle.
- Conduct threat modeling and cybersecurity risk assessments for embedded systems, autonomous platforms, and command-and-control technologies.
- Support DISA STIG compliance activities and collaborate with software, hardware, and DevOps teams to implement security requirements.
- Manage vulnerability remediation efforts, including CVE analysis, SBOM validation, risk prioritization, and tracking corrective actions.
- Assist with security testing activities, including vulnerability scanning, configuration reviews, and secure code review processes.
- Develop and maintain security documentation, procedures, and technical guidance.
- Support incident response and forensic investigations involving product-level cybersecurity events.
- Collaborate with engineering teams to integrate secure development practices and DevSecOps methodologies.
- Track authorization status, security metrics, and compliance requirements and provide updates to leadership and program stakeholders.
- Support proposal efforts, customer engagements, and cybersecurity-related technical discussions.
Qualifications of the Product Security Engineer Include:- 7+ years of experience in Product Security, Cybersecurity, Information Assurance, Security Engineering, or a related field.
- Experience supporting DoD RMF, ATO, IATT, or other federal cybersecurity compliance activities.
- Working knowledge of NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, SRGs, and eMASS.
- Experience conducting vulnerability management, security assessments, threat modeling, or risk analysis activities.
- Familiarity with embedded systems, autonomous platforms, industrial control systems, or mission-critical technologies.
- Understanding of secure software development practices and DevSecOps principles.
- Experience managing or reviewing SBOMs and evaluating software supply chain risks.
- Strong written and verbal communication skills with the ability to work across technical and non-technical teams.
- Knowledge of cybersecurity frameworks such as NIST RMF, CMMC, ISO 27001, ISO/SAE 21434, or IEC 62443.
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field preferred.
- Security certifications such as Security+, CySA+, CISSP, SSCP, GSEC, or equivalent are highly desirable.
Compensation for the Product Security Engineer Includes:- Salary Range: $170,000 - $195,000
- Comprehensive Benefits: Cigna Medical, Dental, Vision, 401(k), Sick Leave if required by law, and Paid Holidays.
Keywords:Product Security, Product Security Engineer, Cybersecurity Engineer, Security Engineer, Application Security, DevSecOps, RMF, Risk Management Framework, ATO, Authority to Operate, IATT, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, eMASS, SBOM, Vulnerability Management, Threat Modeling, CVE Management, Security Compliance, Embedded Systems Security, Autonomous Systems, Defense Technology, Software Security, Security Assessments, Risk Analysis, CMMC, ISO 27001, ISO/SAE 21434, IEC 62443, Security+, CISSP, Secret Clearance, Department of Defense, DoD Cybersecurity.
#LI-JL1 
