Senior DOD Product Security Engineer

Zachary Piper Solutions is seeking a Senior DoD Product Security Engineer to join a leading Defense Technology Company specializing in autonomous systems and advanced technology supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD, requiring 3 days per week onsite and 2 days remote. The Senior DoD Product Security Engineer will support product security across autonomous and embedded systems while owning RMF and ATO activities for assigned DoD programs. This individual will work closely with software, hardware, systems, and DevOps teams to incorporate security throughout the product lifecycle.

Responsibilities of the Senior DoD Product Security Engineer Include:

• Lead RMF and ATO activities for assigned DoD programs from initial security controls through authorization.
• Define security architecture, controls, and technical requirements across hardware and software systems.
• Partner with engineering teams to incorporate security requirements throughout product design and development.
• Develop and maintain security documentation, evidence, POA&Ms, and authorization artifacts.
• Lead threat modeling and risk assessments for autonomous, embedded, and command-and-control systems.
• Serve as a DISA STIG SME and translate security requirements into actionable engineering guidance.
• Oversee security monitoring, logging, secure update strategies, and vulnerability remediation efforts.
• Support SBOM, software supply-chain security, and secure SDLC/DevSecOps practices.
• Review embedded and application systems for security vulnerabilities and coordinate remediation.
• Serve as a primary security resource for government cyber and program stakeholders.

Qualifications of the Senior DoD Product Security Engineer Include:

• 5+ years of security engineering or related technical cybersecurity experience.
• Strong hands-on experience with DoD RMF and the ATO lifecycle.
• Working expertise with NIST 800-37, 800-53, 800-171, DISA STIGs, and eMASS.
• Technical security experience across both hardware and software environments.
• Experience securing embedded, autonomous, disconnected, or operationally deployed systems.
• Ability to develop technical security requirements and communicate them effectively to engineering teams.
• Experience with SBOMs, software supply-chain security, vulnerability management, and secure SDLC practices.
• Familiarity with SAST/DAST, code review, CI/CD, and DevSecOps environments.
• Knowledge of cryptographic security, secure boot, signed firmware, and key-management technologies.
• Must be be eligible to obtain a U.S. security clearance.

Preferred Qualifications of the Senior DoD Product Security Engineer Include:

• Previous experience owning a DoD ATO through the full authorization process.
• Familiarity with CMMC requirements.
• Knowledge of ISO/SAE 21434 and/or IEC 62443 security standards.
• Experience securing embedded, disconnected, industrial, or mission-critical systems.
• CISSP or comparable cybersecurity certification.
• Experience with offensive security, reverse engineering, fuzzing, or exploit analysis.
• Hands-on experience with C, C++, Python, ARM, x86, and/or cryptography.

Compensation for the Senior DoD Product Security Engineer Include:

• Salary Range: $145,000-$175,000 depending on experience
• Comprehensive Benefits: Cigna Medical, Dental, Vision, 401k, Sick Leave if required by law, and holidays

This job opens for applications 9/10/26. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-MR1

#LI-HYBRID

Keywords: Senior Product Security Engineer, DoD Product Security, Security Engineer, Cybersecurity Engineer, Product Security, RMF, Risk Management Framework, ATO, Authority to Operate, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, eMASS, POA&M, Embedded Systems Security, Autonomous Systems, Hardware Security, Software Security, Threat Modeling, SBOM, Vulnerability Management, CVE, Secure SDLC, DevSecOps, SAST, DAST, CI/CD, CMMC, Cryptography, Secure Boot, Firmware Security, C, C++, Python, ARM, x86, CISSP, DoD, Defense Technology, Secret Clearance