Senior Product Security Engineer — Threat Modeling Lead

CHAOS Industries; Washington (District of Columbia); On-site; USD 110,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401k matching

Relocation assistance

Stock option grants

Job summary

CHAOS Industries is seeking a Senior Cybersecurity Engineer focused on Product Security in Washington, DC. The role collaborates with Software, Embedded, Hardware, and DevOps teams to embed security across the lifecycle of mission-critical sensor platforms and software ecosystems.

The ideal candidate has 5+ years in cybersecurity engineering, with hands-on threat modeling, risk assessments, and familiarity with RMF, NIST standards, and security authorization processes.

Qualifications

• 5+ years of cybersecurity engineering or product security experience.
• Experience leading software security architecture efforts.
• Experience with threat modeling and risk assessments.
• Familiarity with SSDLC and application security concepts.
• Knowledge of RMF/NIST/DFARS and security authorization processes.

Responsibilities

• Design secure software and hardware architectures for mission-critical platforms.
• Lead threat modeling and cybersecurity risk assessments across systems.
• Support RMF/ATO/Export controls and security documentation development.
• Coordinate security testing, vulnerability remediation, and validation activities.
• Mentor teams on secure development and security-by-design principles.
• Collaborate with cross-functional teams to balance security with performance.

Skills

Threat modeling

Risk assessments

SSDLC

Security architecture

Security testing

Cross-functional collaboration

Tools

RMF

NIST 800-53

NIST 800-171

CMMC

DFARS

Job description

CHAOS Industries is seeking a Senior Cybersecurity Engineer focused on Product Security in Washington, DC. The role collaborates with Software, Embedded, Hardware, and DevOps teams to embed security across the lifecycle of mission-critical sensor platforms and software ecosystems.

The ideal candidate has 5+ years in cybersecurity engineering, with hands-on threat modeling, risk assessments, and familiarity with RMF, NIST standards, and security authorization processes.