Product Security Engineer

Cybersecurity Jobs

Los Angeles (CA)

On-site

USD 101,000 - 170,000

Full time

3 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Medical benefits

401k match

FSA

HSA

Life insurance

Lunch provided

Fully-stocked kitchen

Unlimited PTO

Casual dress

Stock options

Relocation assistance

Annual bonus

Job summary

CHAOS Industries in Los Angeles, CA, is seeking cybersecurity engineers to design and embed security across mission-critical sensor platforms and supporting software. You will integrate security across the SDLC, lead risk assessments, and drive secure design standards with cross-functional teams.

Responsibilities include threat modeling, security testing, and coordinating with government and customers on security requirements and authorization activities.

Qualifications

2+ years in cybersecurity engineering or related roles.
Experience with secure software design and secure system architecture.
Hands-on threat modeling and risk assessments.
Knowledge of SSDLC practices and app security concepts.
Familiarity with RMF, NIST 800-53/171, and DFARS.
Experience with ATO processes and security documentation.

Responsibilities

Design and implement secure software and hardware architectures for mission-critical platforms.
Integrate security requirements throughout the SDLC with engineering teams.
Lead architecture reviews and identify security risks across software, embedded, real-time, and hardware systems.
Create and maintain secure design standards and engineering guidance.
Support vulnerability remediation, threat modeling, and risk assessments.
Run threat modeling exercises for software, embedded systems, and hardware.
Collaborate with government and stakeholders on security requirements and authorization activities.
Document security boundaries for hardware and software.
Design security testing activities including vulnerability assessments and penetration testing coordination.
Provide guidance on secure development and security-by-design principles.

Skills

Threat modeling

SSDLC

Security architecture

Risk assessments

Cryptographic systems

Key management

Technical communication

Education

CISSP

CSSLP

GSEC

Security+

Tools

eMASS

Job description

Join CHAOS Industries to build and embed security across next-generation sensor platforms and supporting software ecosystems.

Responsibilities

Design and implement secure software and hardware system architectures for mission-critical platforms and supporting infrastructure
Integrate security requirements throughout the software development lifecycle (SDLC) by partnering with engineering teams
Lead architecture reviews and identify security risks across software, embedded, real-time, and hardware systems
Create and maintain secure design standards, engineering guidance, and product security best practices
Support secure development initiatives such as code review, dependency management, secrets management, and vulnerability remediation
Run threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure
Support cybersecurity risk assessments for products, systems, and operational environments
Map attack surfaces, identify trust boundaries, and harden potential exploitation paths
Partner with engineering teams to prioritize and remediate identified security risks
Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies
Contribute to cybersecurity compliance and product authorization work, including:
- RMF (Risk Management Framework)
- ATO (Authority to Operate)
- Development of system security documentation, security controls, SSPs, and assessment artifacts
Support internal and external security audits, assessments, and accreditation activities
Collaborate with government, customer, and program stakeholders on security requirements and authorization activities
Document security boundaries for hardware and software
Design security testing activities, including vulnerability assessments and coordination for penetration testing and remediation validation
Support secure configuration and hardening across software, operating systems, and embedded environments
Review software and system telemetry to identify potential security weaknesses or anomalous behavior
Collaborate with Security Operations and Infrastructure teams to improve product and enterprise security visibility
Work with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational needs
Help build scalable product security processes and governance
Support customer and internal security reviews for deployed technologies and operational environments
Provide guidance on secure development and security-by-design principles to engineering teams

Requirements

2+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles
Experience with software security design and/or secure system architecture principles
Hands-on experience supporting threat modeling and cybersecurity risk assessments
Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts
Familiarity with cybersecurity frameworks and compliance standards including RMF, NIST 800-53, NIST 800-171, and DFARS
Experience supporting security authorization activities, including ATO processes, security documentation development, and eMASS management
Experience securing embedded systems, sensor platforms, or edge computing technologies
Knowledge of cryptographic systems, key management systems, and key handling standards
Strong analytical, troubleshooting, and technical communication skills
Ability to operate effectively in a fast-paced startup environment
U.S. Citizen eligibility to work in government facilities and handle sensitive information
Ability to obtain additional security clearances as required by contract

Preferred Requirements

Active Security Clearance
Experience supporting defense, aerospace, government contracting, or highly regulated technology environments
Firmware security or development experience
BIOS/UEFI security or development experience
Knowledge of Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security
Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent