Senior DoD Product Security Engineer

Senior DoD Product Security Engineer

Zachary Piper Solutions is seeking a Senior DoD Product Security Engineer to join a leading Defense Technology Company specializing in autonomous systems and advanced technologies supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD, requiring 3 days onsite and 2 days remote per week.

The Senior DoD Product Security Engineer will be responsible for securing autonomous and embedded platforms across the product lifecycle while leading RMF and ATO activities for mission-critical defense programs. This role will partner closely with software, hardware, systems, and Dev Ops engineering teams to ensure cybersecurity requirements are integrated into product architecture, development, and deployment efforts.

• Lead RMF and ATO activities for assigned DoD programs through successful authorization.
• Define security architectures, control implementations, and cybersecurity requirements across software and hardware systems.
• Partner with engineering teams to incorporate security requirements throughout product design and development.
• Develop and maintain SSPs, POA&Ms, security evidence packages, and authorization artifacts.
• Conduct threat modeling, risk assessments, and attack surface analysis for autonomous and embedded systems.
• Serve as a DISA STIG subject matter expert and translate security requirements into engineering solutions.
• Oversee vulnerability management, security monitoring, logging, and remediation activities.
• Support SBOM generation, software supply-chain security initiatives, and secure SDLC processes.
• Review application, firmware, and embedded systems for vulnerabilities and compliance risks.
• Act as a primary cybersecurity interface for government customers, assessors, and program leadership.

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related technical field.
• 5+ years of cybersecurity, product security, systems security, or security engineering experience.
• Hands‑on experience supporting DoD RMF and ATO lifecycle activities.
• Strong knowledge of NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, and eMASS.
• Experience securing embedded, autonomous, disconnected, or mission‑critical operational systems.
• Ability to develop technical security requirements and communicate effectively with engineering organizations.
• Experience with vulnerability management, SBOMs, software supply‑chain security, and secure SDLC practices.
• Familiarity with SAST, DAST, code reviews, CI/CD pipelines, and Dev Sec Ops  methodologies.
• Knowledge of cryptographic technologies, secure boot architectures, signed firmware, and key management solutions.

• Experience owning and maintaining a DoD ATO through the complete authorization lifecycle.
• Familiarity with CMMC compliance requirements.
• Working knowledge of ISO/SAE 21434 and/or IEC 62443 security frameworks.
• Experience securing industrial, embedded, disconnected, or operational technology environments.
• CISSP, Security+, CASP+, or comparable cybersecurity certifications.
• Experience with offensive security testing, fuzzing, exploit development, reverse engineering, or vulnerability research.
• Hands‑on programming experience with C, C++, Python, ARM, x86, and secure software development practices.

• Salary Range: $145,000 - $175,000
• Comprehensive benefits package including:
  • Cigna Medical, Dental, and Vision
  • 401(k)
  • Paid Holidays
  • Sick Leave (where required by law)
  • Additional company-sponsored benefits

Senior Product Security Engineer, DoD Product Security Engineer, Cybersecurity Engineer, Product Security, RMF, Risk Management Framework, ATO, Authority to Operate, eMASS, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, POA&Ms, SSP, Embedded Security, Autonomous Systems Security, Mission Systems Security, Threat Modeling, Vulnerability Management, SBOM, Supply Chain Security, Secure SDLC, Dev Sec Ops , SAST, DAST, CI/CD, CMMC, Cryptography, Secure Boot, Firmware Security, Reverse Engineering, Fuzzing, CISSP, Defense Technology, Embedded Systems, Secret Clearance.

#LI-JL1