Product Security Engineer - DoD Cybersecurity & Vetting

Zachary Piper Solutions; Colorado Springs (CO); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

PTO

Paid Holidays

Medical

Dental

Vision

401K

Tuition Reimbursement

Sick Leave

Job summary

Zachary Piper Solutions seeks a Product Security Engineer for an on-site role in Colorado Springs, CO. The engineer will support cybersecurity engineering, vulnerability management, security testing, and compliance across a defense platform.

Responsibilities include coordinating test events, remediation of vulnerabilities, and ensuring cyber compliance within Agile teams throughout the SDLC.

Qualifications

• 3+ years in cybersecurity, information assurance, or related field.
• Experience with patch management, MFA, host-based security solutions, IDS, SIEM, cyber audit tools, and GPO management.
• Knowledge of RMF controls, NIST standards, DISA STIGs, and DoD cybersecurity requirements.

Responsibilities

• Partner with Cyber Engineering to implement, validate, and test cybersecurity solutions across the platform environment.
• Coordinate cybersecurity test events, review test plans, execute security testing, and brief leadership on findings.
• Manage vulnerability remediation including IAVMs, CTOs, CVEs, vendor patches, and DISA STIG verification.
• Support Agile Scrum teams in the SDLC by identifying requirements and ensuring cyber compliance.
• Perform cyber vulnerability assessments, security configuration activities, audits, and deliver actionable recommendations.

Skills

Cybersecurity

Vulnerability mgmt

RMF/NIST/DoD

Agile/SDLC

DoD 8140 IAT II

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

SIEM

GPO

Patch management

Job description

Zachary Piper Solutions seeks a Product Security Engineer for an on-site role in Colorado Springs, CO. The engineer will support cybersecurity engineering, vulnerability management, security testing, and compliance across a defense platform.

Responsibilities include coordinating test events, remediation of vulnerabilities, and ensuring cyber compliance within Agile teams throughout the SDLC.