Senior Cybersecurity Engineer, Product Security

Chaos Industries; El Segundo (CA); On-site; USD 160,000 - 220,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401k with company match

FSA and HSA

Life insurance

Free daily lunch onsite

Fully-stocked kitchen

Unlimited PTO

Casual dress code

Relocation assistance

Annual bonuses

Job summary

CHAOS Industries is seeking a Senior Cybersecurity Engineer focused on Product Security to design, assess, and secure sensor platforms and supporting software ecosystems. You will work with Software, Embedded, Hardware, and Infrastructure teams to embed security across the lifecycle, from architecture to deployment.

The ideal candidate brings hands-on experience in threat modeling, risk assessment, and SSDLC within defense or regulated environments.

Qualifications

• 5+ years of experience in cybersecurity engineering, product security, or related roles.
• Experience with software security design and secure system architecture principles.
• Hands-on threat modeling and cybersecurity risk assessments.
• Knowledge of SSDLC practices and application security concepts.
• Familiarity with RMF, NIST 800-53, NIST 800-171, CMMC, DFARS.
• Experience supporting security authorization activities (ATO) and eMASS.
• Understanding of cloud, endpoint, network, and identity security concepts.
• Strong analytical, troubleshooting, and technical communication skills.
• Able to operate in a fast-paced startup environment.
• Must be a U.S. Citizen eligible for government facilities and sensitive information.
• Ability to obtain additional security clearances as required by contract.

Responsibilities

• Design and lead product security architecture for mission-critical platforms.
• Perform threat modeling and risk assessments across software, embedded, and hardware.
• Support compliance initiatives and security authorization activities.
• Develop and promote secure design standards and guidance.
• Collaborate with engineering teams to remediate identified risks.
• Conduct security testing coordination and vulnerability remediation.

Skills

Threat modeling

Risk assessments

SSDLC

Security architecture

Security testing

Technical communication

Job description

Senior Cybersecurity Engineer, Product Security

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.

CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London. For more information, please visit www.chaosinc.com .

Role Overview:

We are seeking a Cybersecurity Engineer focused on Product Security to help design, assess, and secure our next-generation sensor platforms and supporting software ecosystems. This role will work closely with Software Engineering, Embedded Systems, Hardware Engineering, Infrastructure, and Program teams to ensure security is integrated throughout the product lifecycle — from architecture and development through deployment and operational support.

The ideal candidate has experience securing complex software and hardware systems within defense, aerospace, or other highly regulated environments. This individual will lead software security architecture efforts, perform threat modeling and risk assessments, support compliance initiatives, and help establish secure engineering standards across the organization.

This is a highly collaborative and hands‑on role with direct impact on the security and resiliency of mission‑critical technologies deployed in operational environments.

Responsibilities:

• Product Security Engineering
  
  
  
  • Design and implement secure software and hardwaresystem architectures for mission‑critical platforms and supporting infrastructure
  
  
  • Partner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC)
  
  
  • Conduct architecture reviews and identify security risks across software, embedded, cloud, and hardware systems
  
  
  • Develop secure design standards, engineering guidance, and product security best practices
  
  
  • Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation
  
  
  
  


• Lead threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure


• Conduct cybersecurity risk assessments for products, systems, and operational environments


• Identify attack surfaces, trust boundaries, and potential exploitation paths


• Work with engineering teams to prioritize and remediate identified security risks


• Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies


• Compliance & Security Authorization
  
  
  
  • Support cybersecurity compliance initiatives and product authorization efforts including:
  
  
  • RMF (Risk Management Framework)
  
  
  • ATO (Authority to Operate)
  
  
  • Export control and regulated data handling requirements
  
  
  • Assist with development of system security documentation, security controls, SSPs, and assessment artifacts
  
  
  • Support internal and external security audits, assessments, and accreditation activities
  
  
  • Collaborate with government, customer, and program stakeholders on security requirements and authorization activities
  
  
  
  


• Security Testing & Validation
  
  
  
  • Assist with security testing activities including vulnerability assessments, penetration testing coordination, and validation of remediation efforts
  
  
  • Support secure configuration and hardening efforts across software, operating systems, and embedded environments
  
  
  • Review software and system telemetry to identify potential security weaknesses or anomalous behavior
  
  
  • Collaborate with Security Operations and Infrastructure teams to improve enterprise and product security visibility
  
  
  
  


• Cross-Functional Collaboration
  
  
  
  • Work closely with Software, Embedded, Hardware, DevOps, and Infrastructure teams to balance security, performance, and operational requirements
  
  
  • Contribute to the development of scalable product security processes and governance
  
  
  • Support customer and internal security reviews related to deployed technologies and operational environments
  
  
  • Mentor engineering teams on secure development and security‑by‑design principles
  
  
  
  


• 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles


• Experience with software security design and secure system architecture principles


• Hands‑on experience conducting threat modeling and cybersecurity risk assessments


• Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts


• Familiarity with cybersecurity frameworks and compliance standards including:
  
  
  
  • RMF
  
  
  • NIST 800-53
  
  
  • NIST 800-171
  
  
  • CMMC
  
  
  • DFARS
  
  
  
  


• Experience supporting security authorization activities such as ATO processes and security documentation development, and eMASS


• Understanding of cloud, endpoint, network, and identity security concepts


• Strong analytical, troubleshooting, and technical communication skills


• Ability to operate effectively in a fast‑paced startup environment


• Must be a U.S. Citizen eligible for government facilities and sensitive information


• Ability to obtain additional security clearances as required by contract

Preferred Requirements:

• Active Security Clearance


• Experience supporting defense, aerospace, government contracting, or regulated technology environments


• Experience securing embedded systems, sensor platforms, or edge computing technologies


• Familiarity with export control requirements including ITAR and EAR


• Experience with secure DevSecOps pipelines and automation practices


• Experience with Microsoft GCC High environments and regulated cloud architectures


• BIOS/UEFI security or development experience


• Hardware security design experience


• Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge


• Experience with scripting or automation using Python, PowerShell, or Bash


• Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent

Why CHAOS?

• Health Benefits: Medical, dental, and vision benefits 100% paid for by the company


• Additional benefits: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more


• Our Perks: Free daily lunch while you're working onsite, fully‑stocked kitchen, unlimited PTO, casual dress code


• Compensation Components: Competitive base salaries, generous pre‑IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses


• Team Growth: 500+employees and counting across 5 global offices

Salary Range: $160,000 - $220,000

The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations.

Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.

#LI-onsite

EXPORT CONTROLS - This position may require access to information and technology that is subject to U.S. export controls.

For government reporting purposes, we ask candidates to respond to the below self‑identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in CHAOS Industries’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A \"disabled veteran\" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A \"recently separated veteran\" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An \"active duty wartime or campaign badge veteran\" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An \"Armed forces service medal veteran\" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.