Product Security Lead

Piper Companies; Clarksburg (MD); Hybrid; USD 170,000 - 195,000; Full time

Job summary

Zachary Piper Solutions in Clarksburg, MD is seeking a Product Security Lead to orchestrate security across autonomous vehicle platforms and defense programs. You will drive security strategy, DoD RMF/ATO initiatives, and product security requirements throughout the lifecycle.

The role requires leading cross-functional teams, managing DoD ATO processes, and communicating risk to senior leadership and government partners.

Qualifications

• 7+ years in product security or cybersecurity with leadership experience.
• Proven DoD ATO lifecycle management experience.
• Expert knowledge of NIST 800-37/800-53/800-171 and DISA STIGs.
• Experience securing embedded/autonomous and air-gapped systems.
• Experience with SBOM, vulnerability management, threat modeling, risk assessments.
• Strong communication to senior leadership and government stakeholders.
• Eligibility for U.S. security clearance (Secret preferred).

Responsibilities

• Lead security program across autonomous vehicle platforms with governance and roadmaps.
• Manage DoD ATO and IATT across programs with POA&M tracking.
• Serve as security authority during software release reviews.
• Develop product security roadmaps and resource planning.
• Define cybersecurity requirements for air-gapped environments.
• Lead threat modeling and risk assessments across systems.
• Oversee DISA STIG compliance and translate requirements for teams.
• Manage SBOM and vulnerability processes including CVE remediation.
• Lead product security incident response with cybersecurity team.
• Communicate posture and risks to leadership and government customers.
• Serve as SME for customer engagements, proposals, RFPs, RFQs.
• Help build the product security team via hiring and mentoring.

Skills

Product security leadership

DoD ATO management

NIST 800-37/800-53/800-171

DISA STIG/SRGs

SBOM & vulnerability management

Threat modeling

Security architecture

CISSP or equivalent

Clearance eligibility

Communication with leadership

Tools

eMASS

Job description

Zachary Piper Solutions is seeking a Product Security Lead to join a leading Defense Technology Company specializing in autonomous systems and advanced technology supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD. The Product Security Lead will oversee security efforts across autonomous vehicle platforms and mission-critical defense programs, including security strategy, DoD RMF/ATO initiatives, and product security requirements. This individual will work closely with software, hardware, DevOps, and program teams to strengthen security throughout the product lifecycle.

Responsibilities of the Product Security Lead Include:

• Lead and advance the product security program across multiple autonomous vehicle platforms, including security governance, policies, standards, and long-term planning.
• Manage DoD ATO and IATT efforts across multiple programs, including security control selection, documentation, POA&M tracking, and coordination with government stakeholders.
• Serve as a key security authority during software release reviews and evaluate products for overall security readiness.
• Develop product security roadmaps and identify future capability, staffing, and resource requirements.
• Define cybersecurity requirements for systems operating in air-gapped, disconnected, intermittently connected, and other mission-constrained environments.
• Lead threat modeling and risk assessments across autonomous, embedded, and command-and-control technologies.
• Oversee DISA STIG compliance and translate security requirements into actionable guidance for software, hardware, and DevOps engineering teams.
• Manage SBOM and vulnerability management processes, including CVE assessment, remediation prioritization, and POA&M resolution.
• Lead product-level security incident response efforts in coordination with the corporate cybersecurity team.
• Communicate security posture, program risks, authorization progress, and readiness to senior leadership, government customers, and external partners.
• Serve as a product security SME for customer engagements, proposals, RFPs, and RFQs.
• Help build and develop the product security team through hiring, mentoring, and establishing security-focused engineering practices.

Qualifications of the Product Security Lead Include:

• 7+ years of experience in Product Security or Cybersecurity, including experience leading security programs or teams.
• Proven experience managing a DoD ATO through the full authorization lifecycle.
• Strong knowledge of NIST 800-37, 800-53, 800-171, DISA STIGs/SRGs, and eMASS requirements and documentation.
• Hands-on experience securing embedded, autonomous, or operationally deployed systems, including disconnected or air-gapped environments.
• Experience with SBOM processes, vulnerability management, threat modeling, and security risk assessments within a product engineering environment.
• Ability to work effectively at both the technical engineering level and strategic leadership level.
• Experience supporting multiple cybersecurity and compliance frameworks, including NIST, CMMC, and/or ISO/SAE.
• Strong communication skills with the ability to present technical security risks and recommendations to senior leadership and government stakeholders.
• CISSP or comparable senior-level cybersecurity certification is preferred.
• Must be eligible to obtain a U.S. security clearance; an active Secret clearance is preferred but not required.

Compensation for the Product Security Lead Include:

• Salary Range: $170,000-$195,000
• Comprehensive Benefits: Cigna Medical, Dental, Vision, 401k, Sick Leave if required by law, and holidays.

This job opens for applications 9/10/26.

Keywords: Product Security, Product Security Lead, Product Security Engineer, Cybersecurity, Cyber Security, DoD Cybersecurity, RMF, Risk Management Framework, ATO, Authority to Operate, IATT, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, eMASS, SBOM, Vulnerability Management, CVE, POA&M, Threat Modeling, Embedded Systems Security, Autonomous Systems, Automotive Cybersecurity, DevSecOps, CMMC, ISO/SAE 21434, IEC 62443, DoD, Defense Technology, Security Engineering, CISSP, CUI, ITAR, Secret Clearance