Senior DoD Product Security Engineer – RMF/ATO Lead

Piper Companies; Clarkburg (MS); Hybrid; USD 145,000 - 175,000; Full time

Benefits offered by this job

Comprehensive benefits

Hybrid work schedule

Holidays & sick leave

Job summary

Zachary Piper Solutions seeks a Senior DoD Product Security Engineer for a hybrid role in Clarkburg, MD, supporting DoD programs with RMF and ATO responsibilities across embedded systems. You will collaborate with software, hardware, and DevOps teams to implement security throughout the lifecycle.

Responsibilities include defining security controls, managing documentation, and overseeing secure SDLC, SBOM, and software supply-chain security. DoD clearance eligibility required.

Qualifications

• 5+ years of security engineering or related cybersecurity experience.
• Hands-on with DoD RMF and ATO lifecycle.
• Experience with NIST 800-37/53/171, DISA STIGs, eMASS.

Responsibilities

• Lead RMF and ATO activities for DoD programs from initial security controls through authorization.
• Define security architecture, controls, and technical requirements across hardware and software.
• Partner with engineering to incorporate security requirements throughout product design and development.
• Develop and maintain security documentation, evidence, POA&Ms, and authorization artifacts.
• Lead threat modeling and risk assessments for autonomous, embedded, and command-and-control systems.

Skills

RMF & ATO

SBOMs

DevSecOps

SAST/DAST

Cryptography

C/C++/Python

Tools

eMASS

DISA STIGs

CI/CD tooling

SAST tools

Job description

Zachary Piper Solutions seeks a Senior DoD Product Security Engineer for a hybrid role in Clarkburg, MD, supporting DoD programs with RMF and ATO responsibilities across embedded systems. You will collaborate with software, hardware, and DevOps teams to implement security throughout the lifecycle.

Responsibilities include defining security controls, managing documentation, and overseeing secure SDLC, SBOM, and software supply-chain security. DoD clearance eligibility required.