DoD Product Security Architect & RMF/ATO Lead

Forterra; Clarksburg (MD); On-site; USD 145,000 - 175,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Parental leave

Tuition reimbursement

401(k)

Job summary

Forterra is seeking a Senior DoD Product Security Engineer to own product security for a DoD program end-to-end. You will lead RMF/ATO from threat modeling to signed ATO, and define secure architecture for embedded and air-gapped systems.

You will drive security uplift across hardware and software, translating requirements for engineers and coordinating with government offices. A hands-on IC role with deep DoD security expertise and DevSecOps alignment.

Qualifications

• BS degree in a relevant field or exceptional skill.
• U.S. Person and eligible to obtain a security clearance.
• 5+ years security engineering with program-level responsibility.

Responsibilities

• Own RMF/ATO lifecycle end-to-end for the program and manage POA&Ms.
• Define and enforce secure architecture across hardware and software.
• Write and translate security requirements for engineers to implement.
• Lead threat modeling and risk assessments balancing mitigations and mission needs.
• Serve as STIG SME, tailoring applicability and negotiating with customers.
• Own security monitoring, updates strategy, and vulnerability management.

Skills

RMF/ATO experience

Threat modeling

STIG proficiency

SBOMs

Secure SDLC

Hardware security

Software security

Security requirements

Vulnerability management

Education

BS in CS/CE/InfoSec/EE

Tools

C

C++

Python

ARM

x86

Cryptography

Job description

Forterra is seeking a Senior DoD Product Security Engineer to own product security for a DoD program end-to-end. You will lead RMF/ATO from threat modeling to signed ATO, and define secure architecture for embedded and air-gapped systems.

You will drive security uplift across hardware and software, translating requirements for engineers and coordinating with government offices. A hands-on IC role with deep DoD security expertise and DevSecOps alignment.