Senior DOD Product Security Engineer

Piper Companies; Clarkburg (MS); Hybrid; USD 145,000 - 175,000; Full time

Benefits offered by this job

Comprehensive benefits

Hybrid work schedule

Holidays & sick leave

Job summary

Zachary Piper Solutions seeks a Senior DoD Product Security Engineer for a hybrid role in Clarkburg, MD, supporting DoD programs with RMF and ATO responsibilities across embedded systems. You will collaborate with software, hardware, and DevOps teams to implement security throughout the lifecycle.

Responsibilities include defining security controls, managing documentation, and overseeing secure SDLC, SBOM, and software supply-chain security. DoD clearance eligibility required.

Qualifications

• 5+ years of security engineering or related cybersecurity experience.
• Hands-on with DoD RMF and ATO lifecycle.
• Experience with NIST 800-37/53/171, DISA STIGs, eMASS.

Responsibilities

• Lead RMF and ATO activities for DoD programs from initial security controls through authorization.
• Define security architecture, controls, and technical requirements across hardware and software.
• Partner with engineering to incorporate security requirements throughout product design and development.
• Develop and maintain security documentation, evidence, POA&Ms, and authorization artifacts.
• Lead threat modeling and risk assessments for autonomous, embedded, and command-and-control systems.

Skills

RMF & ATO

SBOMs

DevSecOps

SAST/DAST

Cryptography

C/C++/Python

Tools

eMASS

DISA STIGs

CI/CD tooling

SAST tools

Job description

Zachary Piper Solutions is seeking a Senior DoD Product Security Engineer to join a leading Defense Technology Company specializing in autonomous systems and advanced technology supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD, requiring 3 days per week onsite and 2 days remote. The Senior DoD Product Security Engineer will support product security across autonomous and embedded systems while owning RMF and ATO activities for assigned DoD programs. This individual will work closely with software, hardware, systems, and DevOps teams to incorporate security throughout the product lifecycle.

Responsibilities of the Senior DoD Product Security Engineer Include:

• Lead RMF and ATO activities for assigned DoD programs from initial security controls through authorization.
• Define security architecture, controls, and technical requirements across hardware and software systems.
• Partner with engineering teams to incorporate security requirements throughout product design and development.
• Develop and maintain security documentation, evidence, POA&Ms, and authorization artifacts.
• Lead threat modeling and risk assessments for autonomous, embedded, and command-and-control systems.
• Serve as a DISA STIG SME and translate security requirements into actionable engineering guidance.
• Oversee security monitoring, logging, secure update strategies, and vulnerability remediation efforts.
• Support SBOM, software supply-chain security, and secure SDLC/DevSecOps practices.
• Review embedded and application systems for security vulnerabilities and coordinate remediation.
• Serve as a primary security resource for government cyber and program stakeholders.

Qualifications of the Senior DoD Product Security Engineer Include:

• 5+ years of security engineering or related technical cybersecurity experience.
• Strong hands-on experience with DoD RMF and the ATO lifecycle.
• Working expertise with NIST 800-37, 800-53, 800-171, DISA STIGs, and eMASS.
• Technical security experience across both hardware and software environments.
• Experience securing embedded, autonomous, disconnected, or operationally deployed systems.
• Ability to develop technical security requirements and communicate them effectively to engineering teams.
• Experience with SBOMs, software supply-chain security, vulnerability management, and secure SDLC practices.
• Familiarity with SAST/DAST, code review, CI/CD, and DevSecOps environments.
• Knowledge of cryptographic security, secure boot, signed firmware, and key-management technologies.
• Must be be eligible to obtain a U.S. security clearance.

Preferred Qualifications of the Senior DoD Product Security Engineer Include:

• Previous experience owning a DoD ATO through the full authorization process.
• Familiarity with CMMC requirements.
• Knowledge of ISO/SAE 21434 and/or IEC 62443 security standards.
• Experience securing embedded, disconnected, industrial, or mission-critical systems.
• CISSP or comparable cybersecurity certification.
• Experience with offensive security, reverse engineering, fuzzing, or exploit analysis.
• Hands-on experience with C, C++, Python, ARM, x86, and/or cryptography.

Compensation for the Senior DoD Product Security Engineer Include:

• Salary Range: $145,000-$175,000 depending on experience
• Comprehensive Benefits: Cigna Medical, Dental, Vision, 401k, Sick Leave if required by law, and holidays

This job opens for applications 9/10/26. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-MR1

#LI-HYBRID

Keywords

Senior Product Security Engineer, DoD Product Security, Security Engineer, Cybersecurity Engineer, Product Security, RMF, Risk Management Framework, ATO, Authority to Operate, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, eMASS, POA&M, Embedded Systems Security, Autonomous Systems, Hardware Security, Software Security, Threat Modeling, SBOM, Vulnerability Management, CVE, Secure SDLC, DevSecOps, SAST, DAST, CI/CD, CMMC, Cryptography, Secure Boot, Firmware Security, C, C++, Python, ARM, x86, CISSP, DoD, Defense Technology, Secret Clearance