Product Security Engineer - DoD & Autonomous Systems

Piper Companies; Clarksburg (MD); Hybrid; USD 170,000 - 195,000; Full time

Benefits offered by this job

Cigna Medical

Dental

Vision

401(k)

Paid Holidays

Job summary

Zachary Piper Solutions seeks a Product Security Engineer to support a leading defense technology company in a hybrid role based in Clarksburg, MD. You will drive cybersecurity across autonomous platforms and defense programs, ensuring security, compliance, and lifecycle integrity.

The role requires DoD RMF/ATO experience, vulnerability management, SBOM handling, and DevSecOps collaboration. Strong communication and security certification interest are highly valued.

Qualifications

• 7+ years in Product Security/Cybersecurity or related field.
• Experience with DoD RMF, ATO, IATT and federal compliance activities.
• Knowledge of NIST 800-37/53/171 and DISA STIGs.
• Experience with vulnerability management and threat modeling.
• Familiarity with embedded systems and defense tech is a plus.
• Strong communication across technical and non-technical teams.

Responsibilities

• Support DoD security initiatives and RMF/ATO activities.
• Perform security assessments, threat modeling, and risk analysis.
• Coordinate with government stakeholders and DevSecOps teams.
• Manage SBOMs, CVE analysis, and remediation tracking.
• Develop security documentation and guidance throughout lifecycle.
• Support incident response and cybersecurity investigations.
• Track security metrics and provide leadership updates.

Skills

Communication skills

Security engineering

Threat modeling

Vulnerability management

Team collaboration

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Security certifications (e.g., CISSP, Security+)

Tools

NIST RMF

NIST 800-37/800-53/800-171

DISA STIG/SRGs/eMASS

SBOM management

CVE analysis

Job description

Zachary Piper Solutions seeks a Product Security Engineer to support a leading defense technology company in a hybrid role based in Clarksburg, MD. You will drive cybersecurity across autonomous platforms and defense programs, ensuring security, compliance, and lifecycle integrity.

The role requires DoD RMF/ATO experience, vulnerability management, SBOM handling, and DevSecOps collaboration. Strong communication and security certification interest are highly valued.