Product Security Engineer

Zachary Piper Solutions is seeking a Product Security Engineer to support a critical national defense command and control program focused on missile defense operations. This role will be responsible for implementing, validating, and maintaining cybersecurity protections across a complex mission-critical environment while partnering closely with engineering, testing, and cybersecurity teams.

The ideal candidate will possess experience in cybersecurity engineering, vulnerability management, RMF compliance, Agile development environments, and security testing. This position offers the opportunity to support advanced defense systems that protect U.S. and allied interests through cutting-edge command, control, battle management, and communications capabilities. This position is fully onsite in Colorado Springs, CO.

• Partner with Cyber Engineering teams to implement, integrate, and validate cybersecurity solutions across enterprise platforms and environments.
• Verify security controls are properly implemented, tested, and compliant with program requirements.
• Coordinate cybersecurity test events and support execution of security validation efforts.
• Review, analyze, and validate cyber test plans and test procedures.
• Brief technical findings, recommendations, and risk assessments to program leadership and stakeholders.
• Support cybersecurity teams in delivering new capabilities while maintaining compliance and security requirements.
• Manage Information Assurance Vulnerability Management (IAVM) activities and remediation efforts.
• Support Cyber Tasking Order (CTO) implementation and compliance.
• Analyze and remediate Common Vulnerabilities and Exposures (CVEs).
• Coordinate vendor patch integration, testing, deployment, and validation activities.
• Apply, verify, and maintain DISA STIG configurations across supported systems.
• Conduct vulnerability assessments, configuration reviews, and cybersecurity audits.
• Execute security test cases and provide actionable feedback to development and engineering teams.
• Support Risk Management Framework (RMF) activities and security control implementation.
• Collaborate with software development, systems engineering, cybersecurity, and test organizations throughout the system lifecycle.
• Prepare technical documentation, reports, assessments, and briefings for government and program stakeholders.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.
• 3+ years of cybersecurity, information assurance, or security engineering experience.
• Active DoD Secret Security Clearance.
• Active DoD 8140 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent).
• Strong knowledge of cybersecurity technologies and tools, including:
  • Patch management
  • Multi-factor authentication (MFA)
  • Host-based security systems
  • Intrusion detection and monitoring
  • Security information and event management (SIEM)
  • Active and passive vulnerability scanning
  • Defense-in-depth methodologies
• Experience with Group Policy Object (GPO) management and security configuration management.
• Knowledge of Information Assurance (IA) technologies and security engineering principles.
• Experience with NIST security standards, RMF processes, and DoD security controls.
• Experience working in Agile/Scrum development environments.
• Ability to develop and review security requirements, user stories, test plans, and test procedures.
• Experience conducting vulnerability assessments and remediation activities.
• Understanding of Software Development Life Cycle (SDLC) methodologies and software testing practices.
• Strong technical writing, presentation, and communication skills.

• Experience…