Product Security Engineer - 174338

Piper Companies; Clarksburg (MD); Hybrid; USD 170,000 - 195,000; Full time

Benefits offered by this job

Health benefits

Paid holidays & 401k

Job summary

Zachary Piper Solutions is seeking a Product Security Engineer to support a leading Defense Technology Company focused on autonomous systems and DoD programs. This hybrid role is based in Clarksburg, MD, requiring collaboration across engineering teams to ensure security across software and hardware throughout the development lifecycle.

The role involves threat modeling, vulnerability management, RMF/ATO/IATT activities, and secure DevSecOps practices to protect mission-critical platforms.

Qualifications

• 7+ years in Product Security, Cybersecurity, or related field.
• Experience with DoD RMF, ATO, IATT or federal cybersecurity.
• Knowledge of NIST 800-37/800-53/800-171 and DISA STIGs.

Responsibilities

• Support product security initiatives across defense technology programs.
• Assist with RMF, ATO, and IATT activities, including documentation and control implementation.
• Perform security assessments, vulnerability analysis, and security reviews across lifecycle.
• Conduct threat modeling and cybersecurity risk assessments for embedded systems.
• Support DISA STIG compliance and collaborate with DevOps to implement security requirements.
• Manage vulnerability remediation, CVE analysis, SBOM validation, and corrective actions.
• Assist with security testing, including vulnerability scanning and secure code reviews.
• Develop security documentation and technical guidance.
• Support incident response and forensic investigations at product level.
• Collaborate with engineering to integrate secure development and DevSecOps.
• Track authorization status, security metrics, and compliance for leadership updates.
• Support proposals, customer engagements, and cybersecurity discussions.

Skills

Communication skills

Team collaboration

Problem solving

Attention to detail

Education

Bachelor's degree

Tools

eMASS

SBOM management

Job description

Product Security Engineer

Zachary Piper Solutions is seeking a Product Security Engineer to support a leading Defense Technology Company focused on autonomous systems and advanced technologies supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD. The Product Security Engineer will support cybersecurity initiatives across autonomous vehicle platforms and mission-critical defense programs, helping to ensure products meet security, compliance, and operational requirements throughout the development lifecycle.

Responsibilities of the Product Security Engineer Include:

• Support product security initiatives across autonomous vehicle platforms and defense technology programs.
• Assist with DoD RMF, ATO, and IATT activities, including security documentation, control implementation, POA&M management, and coordination with government stakeholders.
• Perform security assessments, vulnerability analysis, and security reviews throughout the software and hardware development lifecycle.
• Conduct threat modeling and cybersecurity risk assessments for embedded systems, autonomous platforms, and command-and-control technologies.
• Support DISA STIG compliance activities and collaborate with software, hardware, and DevOps teams to implement security requirements.
• Manage vulnerability remediation efforts, including CVE analysis, SBOM validation, risk prioritization, and tracking corrective actions.
• Assist with security testing activities, including vulnerability scanning, configuration reviews, and secure code review processes.
• Develop and maintain security documentation, procedures, and technical guidance.
• Support incident response and forensic investigations involving product-level cybersecurity events.
• Collaborate with engineering teams to integrate secure development practices and DevSecOps methodologies.
• Track authorization status, security metrics, and compliance requirements and provide updates to leadership and program stakeholders.
• Support proposal efforts, customer engagements, and cybersecurity-related technical discussions.

Qualifications of the Product Security Engineer Include:

• 7+ years of experience in Product Security, Cybersecurity, Information Assurance, Security Engineering, or a related field.
• Experience supporting DoD RMF, ATO, IATT, or other federal cybersecurity compliance activities.
• Working knowledge of NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, SRGs, and eMASS.
• Experience conducting vulnerability management, security assessments, threat modeling, or risk analysis activities.
• Familiarity with embedded systems, autonomous platforms, industrial control systems, or mission-critical technologies.
• Understanding of secure software development practices and DevSecOps principles.
• Experience managing or reviewing SBOMs and evaluating software supply chain risks.
• Strong written and verbal communication skills with the ability to work across technical and non-technical teams.
• Knowledge of cybersecurity frameworks such as NIST RMF, CMMC, ISO 27001, ISO/SAE 21434, or IEC 62443.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field preferred.
• Security certifications such as Security+, CySA+, CISSP, SSCP, GSEC, or equivalent are highly desirable.

Compensation for the Product Security Engineer Includes:

• Salary Range: $170,000 - $195,000
• Comprehensive Benefits: Cigna Medical, Dental, Vision, 401(k), Sick Leave if required by law, and Paid Holidays.

Keywords:

Product Security, Product Security Engineer, Cybersecurity Engineer, Security Engineer, Application Security, DevSecOps, RMF, Risk Management Framework, ATO, Authority to Operate, IATT, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, eMASS, SBOM, Vulnerability Management, Threat Modeling, CVE Management, Security Compliance, Embedded Systems Security, Autonomous Systems, Defense Technology, Software Security, Security Assessments, Risk Analysis, CMMC, ISO 27001, ISO/SAE 21434, IEC 62443, Security+, CISSP, Secret Clearance, Department of Defense, DoD Cybersecurity.

#LI-JL1