Product Security Engineer - 174181

Zachary Piper Solutions; Colorado Springs (CO); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Full Benefits

401K Plan

PTO

Job summary

Zachary Piper Solutions seeks a Product Security Engineer to support a national defense command and control program focused on missile defense operations. The role involves implementing, validating, and maintaining cybersecurity protections across a critical environment while collaborating with engineering, testing, and cybersecurity teams.

Fully onsite in Colorado Springs, CO. Ideal candidates will have experience in vulnerability management, RMF, and security testing, along with DoD clearance

Qualifications

• Bachelor's degree or equivalent professional experience.
• 3+ years of cybersecurity, information assurance, or security engineering experience.
• Active DoD Secret Security Clearance.
• Active DoD 8140 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent).
• Strong knowledge of cybersecurity technologies and tools (patch management, MFA, host-based security, IDS/monitoring, SIEM).
• Experience with GPO management and security configuration management.
• Knowledge of IA technologies, RMF processes and DoD security controls.
• Experience with NIST standards, RMF, and Agile/Scrum.

Responsibilities

• Partner with Cyber Engineering teams to implement, integrate, and validate cybersecurity solutions across enterprise platforms and environments.
• Verify security controls are properly implemented, tested, and compliant with program requirements.
• Coordinate cybersecurity test events and support security validation efforts.
• Review, analyze, and validate cyber test plans and procedures.
• Brief findings, recommendations, and risk assessments to program leadership.
• Support cybersecurity teams in delivering new capabilities while maintaining security requirements.
• Manage IAVM activities and remediation efforts.
• Support CTO implementation and compliance.
• Analyze and remediate CVEs.
• Coordinate vendor patch integration, testing, deployment, and validation.
• Apply and maintain DISA STIG configurations.
• Conduct vulnerability assessments, configuration reviews, and audits.
• Execute security test cases and provide actionable feedback to teams.
• Support RMF activities and security control implementation.
• Collaborate across software, systems, cybersecurity, and test teams throughout lifecycle.
• Prepare technical documentation and briefings for government stakeholders.

Skills

DoD Secret Clearance

IAT Level II

RMF compliance

Vulnerability management

SIEM

Patch management

MFA

GPO management

Agile/Scrum

Cybersecurity engineering

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

Windows Group Policy

Vulnerability scanners

DISA STIG configurations

Job description

Zachary Piper Solutions is seeking a Product Security Engineer to support a critical national defense command and control program focused on missile defense operations. This role will be responsible for implementing, validating, and maintaining cybersecurity protections across a complex mission-critical environment while partnering closely with engineering, testing, and cybersecurity teams.

The ideal candidate will possess experience in cybersecurity engineering, vulnerability management, RMF compliance, Agile development environments, and security testing. This position offers the opportunity to support advanced defense systems that protect U.S. and allied interests through cutting-edge command, control, battle management, and communications capabilities. This position is fully onsite in Colorado Springs, CO.

Responsibilities Include:

• Partner with Cyber Engineering teams to implement, integrate, and validate cybersecurity solutions across enterprise platforms and environments.
• Verify security controls are properly implemented, tested, and compliant with program requirements.
• Coordinate cybersecurity test events and support execution of security validation efforts.
• Review, analyze, and validate cyber test plans and test procedures.
• Brief technical findings, recommendations, and risk assessments to program leadership and stakeholders.
• Support cybersecurity teams in delivering new capabilities while maintaining compliance and security requirements.
• Manage Information Assurance Vulnerability Management (IAVM) activities and remediation efforts.
• Support Cyber Tasking Order (CTO) implementation and compliance.
• Analyze and remediate Common Vulnerabilities and Exposures (CVEs).
• Coordinate vendor patch integration, testing, deployment, and validation activities.
• Apply, verify, and maintain DISA STIG configurations across supported systems.
• Conduct vulnerability assessments, configuration reviews, and cybersecurity audits.
• Execute security test cases and provide actionable feedback to development and engineering teams.
• Support Risk Management Framework (RMF) activities and security control implementation.
• Collaborate with software development, systems engineering, cybersecurity, and test organizations throughout the system lifecycle.
• Prepare technical documentation, reports, assessments, and briefings for government and program stakeholders.

Required Qualifications Include

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.
• 3+ years of cybersecurity, information assurance, or security engineering experience.
• Active DoD Secret Security Clearance.
• Active DoD 8140 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent).
• Strong knowledge of cybersecurity technologies and tools, including:
  • Patch management
  • Multi-factor authentication (MFA)
  • Host-based security systems
  • Intrusion detection and monitoring
  • Security information and event management (SIEM)
  • Active and passive vulnerability scanning
  • Defense-in-depth methodologies
• Experience with Group Policy Object (GPO) management and security configuration management.
• Knowledge of Information Assurance (IA) technologies and security engineering principles.
• Experience with NIST security standards, RMF processes, and DoD security controls.
• Experience working in Agile/Scrum development environments.
• Ability to develop and review security requirements, user stories, test plans, and test procedures.
• Experience conducting vulnerability assessments and remediation activities.
• Understanding of Software Development Life Cycle (SDLC) methodologies and software testing practices.
• Strong technical writing, presentation, and communication skills.

Preferred Qualifications

• Experience supporting command and control, missile defense, military, or other large-scale defense systems.
• Advanced knowledge of vulnerability management and enterprise cybersecurity operations.
• Experience supporting complex programs with multiple stakeholders and integrated engineering teams.
• Experience presenting technical cybersecurity findings to senior leadership and government customers.
• Proven ability to solve complex cybersecurity challenges and develop innovative solutions.
• Experience leading cybersecurity initiatives or coordinating cross‑functional technical teams.
• Ability to work independently with minimal supervision while contributing within a highly collaborative environment.

Desired Skills

• Strong analytical and critical thinking abilities.
• Excellent problem‑solving and troubleshooting skills.
• Ability to manage multiple priorities in a fast‑paced environment.
• Strong attention to detail and commitment to security best practices.
• Ability to communicate technical concepts to both technical and non‑technical audiences.
• Self‑starter mindset with a strong sense of ownership and accountability.

Salary and Benefits Include:

• Salary Range: $120,000-160,000 **depending on experience**
• Full Benefits: Cigna Medical, Dental, Vision, 401K, PTO, Sick Leave if required by law, and Holidays