Senior Product Security Engineer
CHAOS Industries13 hours ago
Base Salary
$123k - $211k/yr
Responsibilities
- Assist with secure software and hardware system architecture design for mission-critical platforms and supporting infrastructure.
- Integrate security requirements throughout the software development lifecycle and document secure engineering standards and guidance.
- Execute threat modeling, map attack surfaces and trust boundaries, perform risk assessments, and develop mitigation strategies.
- Support RMF, ATO, SSP, security control, assessment artifact, audit, accreditation, and eMASS activities.
- Design security testing activities, coordinate vulnerability assessments and penetration testing, and validate remediation efforts.
- Support secure configuration and hardening across software, operating systems, and embedded environments.
- Collaborate with Software, Embedded, Hardware, DevSecOps, Infrastructure, Security Operations, government, customer, and program teams.
Requirements
- 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles.
- Experience with software security design, secure system architecture, threat modeling, and cybersecurity risk assessments.
- Knowledge of secure software development lifecycle practices, application security, RMF, NIST 800-53, NIST 800-171, and DFARS.
- Experience supporting ATO processes, security documentation, security authorization activities, and eMASS management.
- Experience securing embedded systems, sensor platforms, or edge computing technologies.
- Knowledge of cryptographic systems, key management systems, and key handling standards.
- U.S. Citizenship, eligibility to work in government facilities and handle sensitive information, and ability to obtain additional security clearances as required by contract.
- Preferred qualifications include active security clearance; defense, aerospace, government contracting, or regulated-environment experience; firmware or BIOS/UEFI security experience; TPM, secure boot, cryptographic hardware, or supply chain security knowledge; and CISSP, CSSLP, GSEC, Security+, or equivalent certifications.
Benefits
- Medical, dental, and vision benefits are 100% paid by the company.
- 401(k) with a 50% company match up to 6% of pay, FSA, HSA, life insurance, and other benefits.
- Free daily lunch while working onsite and a fully stocked kitchen.
- Unlimited PTO and casual dress code.
- Pre-IPO stock option grants and relocation assistance; annual bonuses are coming soon.
- The role is onsite, and the company has offices in Los Angeles, Washington, D.C., San Francisco, San Diego, and London.
Categories
About CHAOS Industries
CHAOS Industries builds networked sensing, communications, and real-time software systems for defense, government security, commercial aviation, and critical infrastructure operators. It sells integrated hardware–software platforms and related services to government and industrial customers. Founded in 2022 and headquartered in Los Angeles, the privately held company also maintains offices in Washington, D.C., San Francisco, San Diego, Seattle, and London, and its products are designed for fielded, time-critical operations.