Senior Product Security Engineer

chaosindustries; El Segundo (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

CHAOS Industries in Los Angeles is seeking a Senior Cybersecurity Engineer focused on Product Security to help design, assess, and secure our next-generation sensor platforms and supporting software ecosystems.

The ideal candidate has hands-on experience securing complex software and hardware in defense or regulated environments, contributing to security architecture, threat modeling, risk assessments, and secure engineering standards.

Qualifications

• 5+ years in cybersecurity engineering or product security.
• Hands-on threat modeling and risk assessments.
• Experience with SSDLC and secure software design concepts.
• Familiarity with RMF, NIST 800-53/800-171, DFARS.

Responsibilities

• Design and implement secure software and hardware architectures for mission-critical platforms.
• Lead threat modeling and risk assessments across software, embedded, and hardware.
• Support RMF/ATO processes and create security artifacts and SSPs.
• Plan and execute security testing and validation activities.
• Collaborate with software, hardware, DevSecOps, and infrastructure teams.

Skills

Cybersecurity engineering

Product security

Threat modeling

SSDLC

Risk assessment

Security testing

Job description

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage-domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.

CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London. For more information, please visit www.chaosinc.com.

Role

We are seeking a Senior Cybersecurity Engineer focused on Product Security to help design, assess, and secure our next-generation sensor platforms and supporting software ecosystems. This role will support the Senior Product Security Engineer and work closely with Engineering, Embedded Systems, Infrastructure, and Program teams to ensure security is integrated throughout the product lifecycle - from architecture and development through deployment and operational support.

The ideal candidate has experience securing complex software and hardware systems within defense, aerospace, or other highly regulated environments. This individual will contribute to software security architecture efforts, assist with threat modeling and risk assessments, aid in compliance initiatives, and support the establishment of secure engineering standards across the organization.

This is a highly collaborative and hands-on role with direct impact on the security and resiliency of mission‑critical technologies deployed in operational environments.

Responsibilities

System Security Engineering

• Assist with the design and implementation of secure software and hardware system architectures for mission‑critical platforms and supporting infrastructure
• Partner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC)
• Enable architecture reviews and identify security risks across software, embedded, real time, and hardware systems
• Document secure design standards, engineering guidance, and product security best practices
• Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation

Threat Modeling & Risk Assessment

• Execute threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure
• Support cybersecurity risk assessments for products, systems, and operational environments
• Map attack surfaces, identify trust boundaries, and harden potential exploitation paths
• Work with engineering teams to prioritize and remediate identified security risks
• Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies

Compliance & Security Authorization

• Contribute to cybersecurity compliance initiatives and product authorization efforts including:
• RMF (Risk Management Framework)
• ATO (Authority to Operate)
• Development of system security documentation, security controls, SSPs, and assessment artifacts
• Support internal and external security audits, assessments, and accreditation activities
• Collaborate with government, customer, and program stakeholders on security requirements and authorization activities
• Document security boundaries for both hardware and software

Security Testing & Validation

• Design security testing activities including vulnerability assessments, penetration testing coordination, and validation of remediation efforts
• Support secure configuration and hardening efforts across software, operating systems, and embedded environments
• Review software and system telemetry to identify potential security weaknesses or anomalous behavior
• Collaborate with Security Operations and Infrastructure teams to improve product and enterprise security visibility

Cross-Functional Collaboration

• Work closely with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational requirements
• Contribute to the development of scalable product security processes and governance
• Support customer and internal security reviews related to deployed technologies and operational environments
• Guide engineering teams on secure development and security-by-design principles

Minimum Requirements

• 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles
• Experience with software security design and/or secure system architecture principles
• Hands‑on experience supporting threat modeling and cybersecurity risk assessments
• Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts
• Familiarity with cybersecurity frameworks and compliance standards including:
• RMF
• NIST 800‑53
• NIST 800‑171
• DFARS
• Experie