Product Security Engineer

Product Security Engineer

Zachary Piper Solutions is seeking a Product Security Engineer to support a leading Defense Technology Company focused on autonomous systems and advanced technologies supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD. The Product Security Engineer will support cybersecurity initiatives across autonomous vehicle platforms and mission‑critical defense programs, helping to ensure products meet security, compliance, and operational requirements throughout the development lifecycle.

Responsibilities of the Product Security Engineer Include:

• Support product security initiatives across autonomous vehicle platforms and defense technology programs.
• Assist with DoD RMF, ATO, IATT activities, including security documentation, control implementation, POA&M management, and coordination with government stakeholders.
• Perform security assessments, vulnerability analysis, and security reviews throughout the software and hardware development lifecycle.
• Conduct threat modeling and cybersecurity risk assessments for embedded systems, autonomous platforms, and command‑and‑control technologies.
• Support DISA STIG compliance activities and collaborate with software, hardware, and DevOps teams to implement security requirements.
• Manage vulnerability remediation efforts, including CVE analysis, SBOM validation, risk prioritization, and tracking corrective actions.
• Assist with security testing activities, including vulnerability scanning, configuration reviews, and secure code review processes.
• Develop and maintain security documentation, procedures, and technical guidance.
• Support incident response and forensic investigations involving product‑level cybersecurity events.
• Collaborate with engineering teams to integrate secure development practices and DevSecOps methodologies.
• Track authorization status, security metrics, and compliance requirements and provide updates to leadership and program stakeholders.
• Support proposal efforts, customer engagements, and cybersecurity‑related technical discussions.

Qualifications of the Product Security Engineer Include:

• 7+ years of experience in Product Security, Cybersecurity, Information Assurance, Security Engineering, or a related field.
• Experience supporting DoD RMF, ATO, IATT, or other federal cybersecurity compliance activities.
• Working knowledge of NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, SRGs, and eMASS.
• Experience conducting vulnerability management, security assessments, threat modeling, or risk analysis activities.
• Familiarity with embedded systems, autonomous platforms, industrial control systems, or mission‑critical technologies.
• Understanding of secure software development practices and DevSecOps principles.
• Experience managing or reviewing SBOMs and evaluating software supply chain risks.
• Strong written and verbal communication skills with the ability to work across technical and non‑technical teams.
• Knowledge of cybersecurity frameworks such as NIST RMF, CMMC, ISO 27001, ISO/SAE 21434, or IEC 62443.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field preferred.
• Security certifications such as Security+, CySA+, CISSP, SSCP, GSEC, or equivalent are highly desirable.

Compensation for the Product Security Engineer Includes:

• Salary Range: $170,000 - $195,000
• Comprehensive Benefits: Cigna Medical, Dental, Vision, 401(k), Sick Leave if required by law, and Paid Holidays.

Keywords:

Product Security, Product Security Engineer, Cybersecurity Engineer, Security Engineer, Application Security, DevSecOps, RMF, Risk Management Framework, ATO, Authority to Operate, IATT, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, eMASS, SBOM, Vulnerability Management, Threat Modeling, CVE Management, Security Compliance, Embedded Systems Security, Autonomous Systems, Defense Technology, Software Security, Security Assessments, Risk Analysis, CMMC, ISO 27001, ISO/SAE 21434, IEC 62443, Security+, CISSP, Secret Clearance, Department of Defense, DoD Cybersecurity.

#LI-JL1