Product Security Engineer - Embedded Robotics & C2

Overland AI; San Francisco (CA); On-site; USD 170,000 - 200,000; Full time

Benefits offered by this job

Equity compensation

Healthcare

Unlimited PTO

401k with company match

Parental leave

Job summary

Overland AI, headquartered in Seattle, WA, is seeking a mission-driven Product Security Engineer to embed security across our autonomous robotic systems and command-and-control platform. You will own compliance with customer contract requirements for cyber security and align with industry standards throughout the lifecycle of the product.

You will drive threat modeling, define security requirements, prioritize risk, and verify controls meet contractual and regulatory standards while coordinating

Qualifications

• 5+ years in product security or cybersecurity engineering.
• Experience leading threat modeling and risk assessments for complex systems.
• Own an ATO end-to-end or deep RMF/ATO experience.
• Proficient with NIST 800-37/800-53/800-171; DISA STIGs/SRGS; eMASS artifact requirements.
• Translate control requirements into implementable guidance for engineers.

Responsibilities

• Embed security into the lifecycle of our autonomous robotic systems and C2 platform.
• Define security requirements and acceptance criteria for features and releases.
• Lead threat modeling and risk analysis across our robotic, autonomy, and C2 systems.
• Own the RMF/ATO lifecycle from control selection to evidence generation and government coordination.
• Define security test plans and verification criteria; drive remediation with engineering teams.

Skills

Threat modeling

RMF/ATO ownership

NIST 800-53/171

STIG guidance

Tools

eMASS

Job description

Overland AI, headquartered in Seattle, WA, is seeking a mission-driven Product Security Engineer to embed security across our autonomous robotic systems and command-and-control platform. You will own compliance with customer contract requirements for cyber security and align with industry standards throughout the lifecycle of the product.

You will drive threat modeling, define security requirements, prioritize risk, and verify controls meet contractual and regulatory standards while coordinating