Product Security Engineer — DoD-Grade Embedded (Remote)

OKSI; Torrance (CA); Hybrid; USD 154,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, vision coverage fully

401(k) contribution

Job summary

OKSI is seeking a Product Security Engineer to own product-level security across our hardware and software systems. You will define and maintain security policies, standards, and architectural practices from design to field deployment.

The role requires hands-on security background, leadership in security reviews, and the ability to guide engineering teams across the product lifecycle.

Qualifications

• 7+ years of product security, embedded security, or cybersecurity systems engineering in defense, aerospace, or advanced tech environments.
• Experience leading threat modeling, security risk assessments, and vulnerability analyses across hardware, firmware and software domains.
• Hands-on experience defining and implementing security policies and standards; you own the policy and architecture.
• Familiarity with DoD policy frameworks and anti-tamper measures including DoDI 5200.39.

Responsibilities

• Lead threat modeling and security analysis across hardware, firmware, and software throughout the product lifecycle.
• Define and implement hardening standards for embedded Linux, RTOS, and bare-metal environments; manage signing policies and key infrastructure.
• Own anti-tamper posture aligned with DoD policy and PPP requirements.
• Serve as product security authority; establish company-wide standards and provide guidance to engineering and operations teams.

Skills

Threat modeling

Vulnerability analysis

Security policy

Security architecture

DoD policy

Communication

Tools

HSMs/KMS

Secure boot

UEFI Secure Boot

ARM TrustZone

RBAC

Code signing

Job description

OKSI is seeking a Product Security Engineer to own product-level security across our hardware and software systems. You will define and maintain security policies, standards, and architectural practices from design to field deployment.

The role requires hands-on security background, leadership in security reviews, and the ability to guide engineering teams across the product lifecycle.