Product Security Engineer

Join CHAOS Industries to build and embed security across next-generation sensor platforms and supporting software ecosystems.

Responsibilities

• Design and implement secure software and hardware system architectures for mission-critical platforms and supporting infrastructure
• Integrate security requirements throughout the software development lifecycle (SDLC) by partnering with engineering teams
• Lead architecture reviews and identify security risks across software, embedded, real-time, and hardware systems
• Create and maintain secure design standards, engineering guidance, and product security best practices
• Support secure development initiatives such as code review, dependency management, secrets management, and vulnerability remediation
• Run threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure
• Support cybersecurity risk assessments for products, systems, and operational environments
• Map attack surfaces, identify trust boundaries, and harden potential exploitation paths
• Partner with engineering teams to prioritize and remediate identified security risks
• Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies
• Contribute to cybersecurity compliance and product authorization work, including:
  • RMF (Risk Management Framework)
  • ATO (Authority to Operate)
  • Development of system security documentation, security controls, SSPs, and assessment artifacts
• Support internal and external security audits, assessments, and accreditation activities
• Collaborate with government, customer, and program stakeholders on security requirements and authorization activities
• Document security boundaries for hardware and software
• Design security testing activities, including vulnerability assessments and coordination for penetration testing and remediation validation
• Support secure configuration and hardening across software, operating systems, and embedded environments
• Review software and system telemetry to identify potential security weaknesses or anomalous behavior
• Collaborate with Security Operations and Infrastructure teams to improve product and enterprise security visibility
• Work with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational needs
• Help build scalable product security processes and governance
• Support customer and internal security reviews for deployed technologies and operational environments
• Provide guidance on secure development and security-by-design principles to engineering teams

Requirements

• 2+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles
• Experience with software security design and/or secure system architecture principles
• Hands-on experience supporting threat modeling and cybersecurity risk assessments
• Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts
• Familiarity with cybersecurity frameworks and compliance standards including RMF, NIST 800-53, NIST 800-171, and DFARS
• Experience supporting security authorization activities, including ATO processes, security documentation development, and eMASS management
• Experience securing embedded systems, sensor platforms, or edge computing technologies
• Knowledge of cryptographic systems, key management systems, and key handling standards
• Strong analytical, troubleshooting, and technical communication skills
• Ability to operate effectively in a fast-paced startup environment
• U.S. Citizen eligibility to work in government facilities and handle sensitive information
• Ability to obtain additional security clearances as required by contract

Preferred Requirements

• Active Security Clearance
• Experience supporting defense, aerospace, government contracting, or highly regulated technology environments
• Firmware security or development experience
• BIOS/UEFI security or development experience
• Knowledge of Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security
• Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent

Technologies

• RMF (Risk Management Framework)
• ATO (Authority to Operate)
• NIST 800-53
• NIST 800-171
• DFARS
• eMASS
• SSDLC
• SSPs

Benefits

• Medical, dental, and vision benefits 100% paid by the company
• 401k with +50% company match up to 6% of pay
• FSA
• HSA
• Life insurance
• Free daily lunch while working onsite
• Fully-stocked kitchen
• Unlimited PTO
• Casual dress code
• Competitive base salaries
• Generous pre-IPO stock option grants
• Relocation assistance
• (Coming soon) annual bonuses

Compensation

• Salary range: $101,000 - $170,000 per year

Location

• Los Angeles, CA (onsite)

Recruiting

• CHAOS Industries does not accept unsolicited resumes or outreach; unsolicited submissions will not be reviewed or compensated