Senior DoD Product Security Architect - RMF/ATO Leader

Piper Companies; Clarksburg (MD); Hybrid; USD 145,000 - 175,000; Full time

Benefits offered by this job

Cigna Medical, Dental, Vision

401(k)

Paid Holidays

Sick Leave

Additional company-sponsored benefits

Job summary

Zachary Piper Solutions seeks a Senior DoD Product Security Engineer to secure autonomous and embedded platforms across the product lifecycle. You will lead RMF/ATO activities and collaborate with software, hardware, and DevOps teams to embed cybersecurity requirements in design and deployment.

The role emphasizes threat modeling, vulnerability management, and SBOM/software supply-chain security within defense programs, with a hybrid Clarksburg, MD work arrangement.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related technical field.
• 5+ years of cybersecurity, product security, systems security, or security engineering experience.
• Hands-on experience supporting DoD RMF and ATO lifecycle activities.
• Strong knowledge of NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, and eMASS.
• Experience securing embedded, autonomous, disconnected, or mission-critical operational systems.
• Ability to develop technical security requirements and communicate effectively with engineering organizations.
• Experience with vulnerability management, SBOMs, software supply-chain security, and secure SDLC practices.
• Familiarity with SAST, DAST, code reviews, CI/CD pipelines, and DevSecOps methodologies.
• Knowledge of cryptographic technologies, secure boot architectures, signed firmware, and key management solutions.

Responsibilities

• Lead RMF and ATO activities for assigned DoD programs through successful authorization.
• Define security architectures, control implementations, and cybersecurity requirements across software and hardware systems.
• Partner with engineering teams to incorporate security requirements throughout product design and development.
• Develop and maintain SSPs, POA&Ms, security evidence packages, and authorization artifacts.
• Conduct threat modeling, risk assessments, and attack surface analysis for autonomous and embedded systems.
• Serve as a DISA STIG subject matter expert and translate security requirements into engineering solutions.
• Oversee vulnerability management, security monitoring, logging, and remediation activities.
• Support SBOM generation, software supply-chain security initiatives, and secure SDLC processes.
• Review application, firmware, and embedded systems for vulnerabilities and compliance risks.
• Act as a primary cybersecurity interface for government customers, assessors, and program leadership.

Skills

RMF/ATO lifecycle

Security architectures

Threat modeling

Vulnerability management

SBOMs / supply chain

DevSecOps

SAST/DAST

Communicating with engineering teams

Cryptography concepts

Education

Bachelor's degree in Cybersecurity/CS/Engineering/Info Systems

Tools

C

C++

Python

ARM

x86

Job description

Zachary Piper Solutions seeks a Senior DoD Product Security Engineer to secure autonomous and embedded platforms across the product lifecycle. You will lead RMF/ATO activities and collaborate with software, hardware, and DevOps teams to embed cybersecurity requirements in design and deployment.

The role emphasizes threat modeling, vulnerability management, and SBOM/software supply-chain security within defense programs, with a hybrid Clarksburg, MD work arrangement.