Senior DoD Security Architect — Autonomous Systems

Forterra Inc.; Clarksburg (MD); On-site; USD 145,000 - 175,000; Full time

Benefits offered by this job

Premium Healthcare Benefits

20 days PTO

Parental leave (7 weeks)

Tuition assistance

401(k) match

Job summary

Forterra seeks a Senior DoD Product Security Engineer to own product security end-to-end for a DoD program. You will manage RMF/ATO, develop secure architecture, and translate controls into concrete actions for engineers working on embedded and air-gapped systems.

You will lead threat modeling, risk assessments, STIG guidance, and compliance communication with government offices, while collaborating across software, hardware, and DevOps teams to ensure trusted autonomous platforms.

Qualifications

• 5+ years in security engineering or equivalent leadership on a program.
• Hands-on RMF/ATO experience and end-to-end ownership.
• Knowledge of NIST SPs, STIGs, and government review cycles.
• Ability to translate threat and control requirements into actions.
• Experience with hardware and software security in embedded systems.

Responsibilities

• Own RMF and the ATO lifecycle end-to-end for your program, including POA&Ms.
• Define and drive the security architecture, with implementable paths.
• Lead threat modeling across autonomy and embedded systems.
• Audit code for vulnerabilities and drive remediation with teams.
• Collaborate on SBOMs and secure SDLC practices for DevSecOps.

Skills

RMF/ATO

NIST 800-37/53/800-171

DISA STIGs

Threat modeling

SBOMs / Secure SDLC

C/C++ / Python

Security architecture

Education

BS in Computer Science

Security clearance eligibility

Tools

eMASS

Job description

Forterra seeks a Senior DoD Product Security Engineer to own product security end-to-end for a DoD program. You will manage RMF/ATO, develop secure architecture, and translate controls into concrete actions for engineers working on embedded and air-gapped systems.

You will lead threat modeling, risk assessments, STIG guidance, and compliance communication with government offices, while collaborating across software, hardware, and DevOps teams to ensure trusted autonomous platforms.