Senior DoD Product Security Engineer - RMF/ATO Lead

Zachary Piper Solutions; Clarksburg (MD); Hybride; USD 145 000 - 175 000; Plein temps

Avantages offerts par ce poste

Cigna Medical, Dental, and Vision

401(k)

Paid Holidays

Sick Leave (where required by law)

Company-sponsored benefits

Résumé du poste

Zachary Piper Solutions is seeking a Senior DoD Product Security Engineer to join a leading defense technology company in Clarksburg, MD. This hybrid role requires 3 days onsite and 2 days remote per week and focuses on securing autonomous and embedded platforms across the product lifecycle.

You will lead RMF and ATO activities for mission critical DoD programs, define security architectures and control implementations, and partner with software, hardware, and DevOps teams to ensure

Qualifications

• Bachelor's degree in a technical field (Cybersecurity, CS, or engineering).
• 5+ years in cybersecurity or product security roles.
• Experience securing DoD RMF and ATO lifecycles.
• Knowledge of NIST 800-37/53/171, DISA STIGs, eMASS.
• Experience with embedded/mission-critical systems.
• Ability to derive security requirements and communicate with engineers.
• SBOM, software supply-chain security, and secure SDLC familiarity.
• SAST, DAST, code reviews, CI/CD, and DevSecOps familiarity.

Responsabilités

• Lead RMF and ATO activities for DoD programs.
• Define security architectures and controls across software/hardware.
• Partner with engineering to embed security in design and development.
• Develop and maintain SSPs, POA&Ms, evidence packages, and artifacts.
• Conduct threat modeling, risk assessments, and attack surface analysis.
• Serve as DISA STIG SME and translate requirements to engineering.
• Oversee vulnerability management, monitoring, and remediation.
• Support SBOM generation and secure software supply chain.
• Review software and firmware for vulnerabilities and risks.
• Act as primary cybersecurity interface for government customers.

Connaissances

RMF

ATO

Threat Modeling

Vulnerability Management

SBOM

Secure SDLC

CMMC

DevSecOps

CISSP

Cryptography

Formation

Bachelor's degree in Cybersecurity

Outils

eMASS

SAST

DAST

Description du poste

Zachary Piper Solutions is seeking a Senior DoD Product Security Engineer to join a leading defense technology company in Clarksburg, MD. This hybrid role requires 3 days onsite and 2 days remote per week and focuses on securing autonomous and embedded platforms across the product lifecycle.

You will lead RMF and ATO activities for mission critical DoD programs, define security architectures and control implementations, and partner with software, hardware, and DevOps teams to ensure