Senior Product Security Lead — DoD Programs

Forterra; Arlington (VA); On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Premium Healthcare Benefits

20 days PTO per year

7 weeks parental leave

$9k tuition reimbursement

Job summary

Forterra seeks a seasoned Product Security Lead to own security for all Forterra platforms end-to-end. This hands-on leadership role combines governance, strategy, and execution across software, hardware, and DevOps.

You will lead a small security team while guiding a large cross-functional group and serve as the security SME in pre-sales and customer evaluations. You will have built security programs, earned DoD authorizations from start to finish, and operate with credibility from engineering

Qualifications

• 7+ years in product or cybersecurity with proven program leadership.
• Experience owning an ATO end-to-end as the responsible authority.
• Practical command of NIST 800-37/800-53/800-171; DISA STIGS/SRG; eMASS artifacts.
• Experience securing embedded, autonomous, or operationally deployed systems.
• Led security programs, teams, and cross-functional security execution.
• Ability to operate at strategic and tactical levels with executives.

Responsibilities

• Own enterprise product security program across multiple autonomous platforms and lines.
• Lead full ATO lifecycle, control selection, evidence generation, and POAM management.
• Participate in software release boards as security go/no-go authority.
• Set 12- and 24-month security roadmaps, maturity plans, and resource forecasting.
• Brief senior leadership and government/commercial partners on risk and status.
• Develop cyber security requirements for networks including air-gapped environments.
• Lead threat modelling across autonomous and C2 systems; drive risk assessments.
• Own DISA STIG compliance strategy and implement guidance for engineering teams.
• Own SBOM generation pipeline and vulnerability management including CVE triage.
• Lead product security incident response and cross-group remediation.
• Support pre-sales security SME for RFP/RFQ responses.
• Build, mentor, and grow the product security team and culture.

Skills

Product security leadership

ATO program end-to-end

NIST 800-37/53/171

DISA STIGs and SRG

SBOM and vulnerability management

Security exemption handling

Executive briefing & stakeholder comms

DoD security clearance

Tools

eMASS

Job description

Forterra seeks a seasoned Product Security Lead to own security for all Forterra platforms end-to-end. This hands-on leadership role combines governance, strategy, and execution across software, hardware, and DevOps.

You will lead a small security team while guiding a large cross-functional group and serve as the security SME in pre-sales and customer evaluations. You will have built security programs, earned DoD authorizations from start to finish, and operate with credibility from engineering