Product Security Engineer

Zachary Piper Solutions; Clarksburg (MD); Hybrid; USD 170,000 - 195,000; Full time

Benefits offered by this job

Cigna Medical

401(k)

Paid Holidays

Sick Leave

Holidays

Job summary

Zachary Piper Solutions is seeking a Product Security Engineer to support a leading defense technology company, focusing on autonomous systems and cybersecurity across the development lifecycle.

The role involves DoD RMF/ATO/IATT activities, vulnerability management, threat modeling, and collaboration with DevSecOps teams to implement security requirements for embedded platforms.

Qualifications

• Seven or more years in product security, cybersecurity, or related field.
• Experience supporting DoD RMF, ATO, IATT, or federal compliance activities.
• Working knowledge of NIST RMF/ISO 27001 and STIGs, eMASS tooling.
• Experience with vulnerability management, security assessments, threat modeling, risk analysis.
• Familiarity with embedded systems and mission-critical technologies.
• Strong communication across technical and non-technical teams.
• Bachelor’s degree preferred; security certifications desirable.

Responsibilities

• Support security initiatives across autonomous vehicle platforms and defense programs.
• Assist with DoD RMF, ATO, IATT activities, including documentation and control implementation.
• Perform security assessments, vulnerability analyses, and reviews throughout the lifecycle.
• Conduct threat modeling and cybersecurity risk assessments for embedded systems.
• Support DISA STIG compliance and collaborate to implement security requirements.
• Manage vulnerability remediation, CVE analysis, SBOM validation, and tracking actions.
• Contribute to security testing, configuration reviews, and secure code reviews.
• Develop and maintain security documentation and technical guidance.
• Support incident response and forensics for product cybersecurity events.
• Collaborate with engineering to integrate secure development and DevSecOps.
• Track authorization status, security metrics, and compliance updates for leadership.
• Support proposal efforts and cybersecurity-focused technical discussions.

Skills

Product Security

Cybersecurity

Information Assurance

Security Engineering

Threat Modeling

DevSecOps

SBOM Management

Security Certifications

Communication Skills

NIST RMF

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

eMASS

NIST 800-37

NIST 800-53

NIST 800-171

DISA STIGs

ISO 27001

Job description

Product Security Engineer

Zachary Piper Solutions is seeking a Product Security Engineer to support a leading Defense Technology Company focused on autonomous systems and advanced technologies supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD. The Product Security Engineer will support cybersecurity initiatives across autonomous vehicle platforms and mission‑critical defense programs, helping to ensure products meet security, compliance, and operational requirements throughout the development lifecycle.

Responsibilities of the Product Security Engineer Include:

• Support product security initiatives across autonomous vehicle platforms and defense technology programs.
• Assist with DoD RMF, ATO, IATT activities, including security documentation, control implementation, POA&M management, and coordination with government stakeholders.
• Perform security assessments, vulnerability analysis, and security reviews throughout the software and hardware development lifecycle.
• Conduct threat modeling and cybersecurity risk assessments for embedded systems, autonomous platforms, and command‑and‑control technologies.
• Support DISA STIG compliance activities and collaborate with software, hardware, and DevOps teams to implement security requirements.
• Manage vulnerability remediation efforts, including CVE analysis, SBOM validation, risk prioritization, and tracking corrective actions.
• Assist with security testing activities, including vulnerability scanning, configuration reviews, and secure code review processes.
• Develop and maintain security documentation, procedures, and technical guidance.
• Support incident response and forensic investigations involving product‑level cybersecurity events.
• Collaborate with engineering teams to integrate secure development practices and DevSecOps methodologies.
• Track authorization status, security metrics, and compliance requirements and provide updates to leadership and program stakeholders.
• Support proposal efforts, customer engagements, and cybersecurity‑related technical discussions.

Qualifications of the Product Security Engineer Include:

• 7+ years of experience in Product Security, Cybersecurity, Information Assurance, Security Engineering, or a related field.
• Experience supporting DoD RMF, ATO, IATT, or other federal cybersecurity compliance activities.
• Working knowledge of NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, SRGs, and eMASS.
• Experience conducting vulnerability management, security assessments, threat modeling, or risk analysis activities.
• Familiarity with embedded systems, autonomous platforms, industrial control systems, or mission‑critical technologies.
• Understanding of secure software development practices and DevSecOps principles.
• Experience managing or reviewing SBOMs and evaluating software supply chain risks.
• Strong written and verbal communication skills with the ability to work across technical and non‑technical teams.
• Knowledge of cybersecurity frameworks such as NIST RMF, CMMC, ISO 27001, ISO/SAE 21434, or IEC 62443.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field preferred.
• Security certifications such as Security+, CySA+, CISSP, SSCP, GSEC, or equivalent are highly desirable.

Compensation for the Product Security Engineer Includes:

• Salary Range: $170,000 - $195,000
• Comprehensive Benefits: Cigna Medical, Dental, Vision, 401(k), Sick Leave if required by law, and Paid Holidays.

Keywords:

Product Security, Product Security Engineer, Cybersecurity Engineer, Security Engineer, Application Security, DevSecOps, RMF, Risk Management Framework, ATO, Authority to Operate, IATT, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, eMASS, SBOM, Vulnerability Management, Threat Modeling, CVE Management, Security Compliance, Embedded Systems Security, Autonomous Systems, Defense Technology, Software Security, Security Assessments, Risk Analysis, CMMC, ISO 27001, ISO/SAE 21434, IEC 62443, Security+, CISSP, Secret Clearance, Department of Defense, DoD Cybersecurity.

#LI-JL1