Senior Product Security Architect (Remote)

OKSI; Los Angeles (CA); On-site; USD 154,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Three weeks vacation

401K with employer contribution

Educational assistance

Job summary

OKSI is seeking a Product Security Engineer to own product-level security across our hardware and software systems. You will define and maintain the policies, standards, and architectural practices that protect our systems from design through field deployment.

This is a strategic role requiring both the depth to establish security standards company-wide and the hands-on technical background to assess implementation and guide engineering teams.

Qualifications

• 7+ years in product/embedded security or cybersecurity systems engineering in defense/advanced tech environments.
• Proven ability to lead threat modeling, risk assessments, and vulnerability analyses across hardware, firmware, and software.
• Hands-on experience defining security policies and standards and owning policy/architecture.

Responsibilities

• Lead threat modeling and security analysis across hardware, firmware, and software throughout the product lifecycle.
• Define and implement hardening standards for embedded Linux, RTOS, and bare-metal environments; manage signing policies and secure boot.
• Own anti-tamper posture per DoD policy and ensure PPP alignment and implementation across product lines.
• Serve as product security authority; establish standards, lead design reviews, and embed security into Systems Engineering.

Skills

Threat modeling

Security risk assessments

Vulnerability analysis

Security policies & standards

Secure boot architectures

Embedded Linux hardening

Key management infrastructure

Program Protection Plans

Policy documentation

Tools

HSMs

KMS

Job description

OKSI is seeking a Product Security Engineer to own product-level security across our hardware and software systems. You will define and maintain the policies, standards, and architectural practices that protect our systems from design through field deployment.

This is a strategic role requiring both the depth to establish security standards company-wide and the hands-on technical background to assess implementation and guide engineering teams.