Senior DOD Product Security Engineer - 174193

Piper Companies; Clarkburg (MS); Hybrid; USD 145,000 - 175,000; Full time

Benefits offered by this job

Healthcare benefits

Hybrid work model

Job summary

Zachary Piper Solutions seeks a Senior DoD Product Security Engineer to own RMF/ATO activities for DoD programs, across autonomous and embedded systems. You will partner with software, hardware, and DevOps teams to secure the full product lifecycle.

Requirements include 5+ years in security engineering, DoD RMF/ATO experience, and strong knowledge of NIST/DISA STIG standards. Hybrid role based in Clarksburg, MD with 3 days onsite.

Qualifications

• 5+ years of security engineering or related cybersecurity experience.
• Hands-on DoD RMF and ATO lifecycle experience.
• Experience with NIST SPs, DISA STIGs, and eMASS.
• Security across hardware and software environments; embedded/autonomous systems.

Responsibilities

• Lead RMF and ATO activities from initial security controls to authorization.
• Define security architecture across hardware and software systems.
• Work with engineering to embed security in design and development.
• Create and maintain security documentation, POA&Ms, and artifacts.
• Lead threat modeling and risk assessments for autonomous and embedded systems.
• Serve as DISA STIG SME translating requirements into engineering guidance.
• Oversee security monitoring, logging, secure updates, and remediation.
• Support SBOM, software supply-chain security, and secure SDLC/DevSecOps.
• Review embedded and application systems for vulnerabilities; coordinate remediation.

Skills

RMF

ATO lifecycle

NIST 800-37

NIST 800-53

NIST 800-171

DISA STIG

eMASS

SBOM

DevSecOps

SAST

DAST

CI/CD

CMMC

Cryptography

Secure Boot

Firmware Security

C

C++

Python

ARM

x86

CISSP

DoD

Job description

Zachary Piper Solutions is seeking a Senior DoD Product Security Engineer to join a leading Defense Technology Company specializing in autonomous systems and advanced technology supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD, requiring 3 days per week onsite and 2 days remote. The Senior DoD Product Security Engineer will support product security across autonomous and embedded systems while owning RMF and ATO activities for assigned DoD programs. This individual will work closely with software, hardware, systems, and DevOps teams to incorporate security throughout the product lifecycle.

Responsibilities of the Senior DoD Product Security Engineer Include:

• Lead RMF and ATO activities for assigned DoD programs from initial security controls through authorization.
• Define security architecture, controls, and technical requirements across hardware and software systems.
• Partner with engineering teams to incorporate security requirements throughout product design and development.
• Develop and maintain security documentation, evidence, POA&Ms, and authorization artifacts.
• Lead threat modeling and risk assessments for autonomous, embedded, and command-and-control systems.
• Serve as a DISA STIG SME and translate security requirements into actionable engineering guidance.
• Oversee security monitoring, logging, secure update strategies, and vulnerability remediation efforts.
• Support SBOM, software supply-chain security, and secure SDLC/DevSecOps practices.
• Review embedded and application systems for security vulnerabilities and coordinate remediation.
• Serve as a primary security resource for government cyber and program stakeholders.

Qualifications of the Senior DoD Product Security Engineer Include:

• 5+ years of security engineering or related technical cybersecurity experience.
• Strong hands-on experience with DoD RMF and the ATO lifecycle.
• Working expertise with NIST 800-37, 800-53, 800-171, DISA STIGs, and eMASS.
• Technical security experience across both hardware and software environments.
• Experience securing embedded, autonomous, disconnected, or operationally deployed systems.
• Ability to develop technical security requirements and communicate them effectively to engineering teams.
• Experience with SBOMs, software supply-chain security, vulnerability management, and secure SDLC practices.
• Familiarity with SAST/DAST, code review, CI/CD, and DevSecOps environments.
• Knowledge of cryptographic security, secure boot, signed firmware, and key-management technologies.
• Must be be eligible to obtain a U.S. security clearance.

Preferred Qualifications of the Senior DoD Product Security Engineer Include:

• Previous experience owning a DoD ATO through the full authorization process.
• Familiarity with CMMC requirements.
• Knowledge of ISO/SAE 21434 and/or IEC 62443 security standards.
• Experience securing embedded, disconnected, industrial, or mission-critical systems.
• CISSP or comparable cybersecurity certification.
• Experience with offensive security, reverse engineering, fuzzing, or exploit analysis.
• Hands-on experience with C, C++, Python, ARM, x86, and/or cryptography.

Compensation for the Senior DoD Product Security Engineer Include:

• Salary Range: $145,000-$175,000 depending on experience
• Comprehensive Benefits: Cigna Medical, Dental, Vision, 401k, Sick Leave if required by law, and holidays

This job opens for applications 9/10/26. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-MR1

#LI-HYBRID

Keywords

Senior Product Security Engineer, DoD Product Security, Security Engineer, Cybersecurity Engineer, Product Security, RMF, Risk Management Framework, ATO, Authority to Operate, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, eMASS, POA&M, Embedded Systems Security, Autonomous Systems, Hardware Security, Software Security, Threat Modeling, SBOM, Vulnerability Management, CVE, Secure SDLC, DevSecOps, SAST, DAST, CI/CD, CMMC, Cryptography, Secure Boot, Firmware Security, C, C++, Python, ARM, x86, CISSP, DoD, Defense Technology, Secret Clearance