Senior Product Security Engineer

The role

This person will design, assess, and secure next-generation sensor platforms and supporting software ecosystems. They will work with engineering, embedded systems, infrastructure, and program teams to integrate security throughout the product lifecycle.

What you will do

• Assist with the design and implementation of secure software and hardware system architectures
• Partner with engineering teams to integrate security requirements throughout the SDLC
• Enable architecture reviews and identify security risks across software, embedded, real time, and hardware systems
• Document secure design standards, engineering guidance, and product security best practices
• Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation
• Execute threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure
• Support cybersecurity risk assessments for products, systems, and operational environments
• Map attack surfaces, identify trust boundaries, and harden potential exploitation paths
• Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies
• Contribute to cybersecurity compliance initiatives and product authorization efforts

Required qualifications

• 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles
• Experience with software security design and/or secure system architecture principles
• Hands-on experience supporting threat modeling and cybersecurity risk assessments
• Knowledge of secure software development lifecycle ( SSDLC ) practices and application security concepts
• Familiarity with cybersecurity frameworks and compliance standards including RMF, NIST 800-53, NIST 800-171, and DFARS
• Experience supporting security authorization activities such as ATO processes, security documentation development, and eMASS management
• Experience securing embedded systems, sensor platforms, or edge computing technologies
• Knowledge of cryptographic systems, key management systems, and key handling standards
• Strong analytical, troubleshooting, and technical communication skills
• Ability to operate effectively in a fast-paced startup environment
• Must be a U.S. Citizen eligible to work in government facilities and handle sensitive information
• Ability to obtain additional security clearances as required by contract

Nice to have

• Active Security Clearance
• Experience supporting defense, aerospace, government contracting, or highly regulated technology environments
• Firmware security or development experience
• BIOS/ UEFI security or development experience
• Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge
• Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent

Benefits

• Medical, dental, and vision benefits 100% paid for by the company
• 401k with 50% company match up to 6% of pay
• FSA
• HSA
• life insurance
• Free daily lunch while you're working onsite
• fully-stocked kitchen
• unlimited PTO
• casual dress code
• pre-IPO stock option grants
• relocation assistance
• annual bonuses (coming soon)

Before you apply

• Must be a U.S. Citizen eligible to work in government facilities and handle sensitive information
• Ability to obtain additional security clearances as required by contract

About the company

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage. The company was founded in 2022 and has raised a total of $1 billion in funding.