Назад
Company hidden
4 дня назад

Product Security Engineer (Defense)

101 000 - 170 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
junior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Product Security Engineer (Defense): Securing next-generation sensor platforms and supporting software ecosystems with an accent on secure system architecture, threat modeling, compliance authorization, and security testing. Focus on assessing attack surfaces, developing RMF and ATO documentation, hardening embedded and hardware systems, and remediating cybersecurity risks in mission-critical environments.

Location: El Segundo, California, United States; onsite

Salary: $101,000–$170,000 base compensation per year

Company

hirify.global develops defense products powered by Coherent Distributed Networks for warfighters, commercial air operators, and border protection teams.

What you will do

  • Design and implement secure software and hardware architectures for mission-critical sensor platforms and supporting infrastructure.
  • Integrate security requirements throughout the SDLC and document secure design standards, engineering guidance, and product security practices.
  • Execute threat modeling and cybersecurity risk assessments across software, embedded, real-time, hardware, and operational environments.
  • Identify attack surfaces and trust boundaries, develop mitigation strategies, and coordinate vulnerability remediation, penetration testing, and security validation.
  • Contribute to RMF, ATO, security controls, SSPs, assessment artifacts, audits, and accreditation activities.
  • Collaborate with Software, Embedded, Hardware, DevSecOps, Infrastructure, Security Operations, government, customer, and program teams.

Requirements

  • 2+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles.
  • Experience with software security design or secure system architecture principles, threat modeling, and cybersecurity risk assessments.
  • Knowledge of SSDLC practices and application security concepts.
  • Knowledge of RMF, NIST 800-53, NIST 800-171, and DFARS.
  • Experience supporting ATO processes, security authorization documentation, and eMASS management.
  • Experience securing embedded systems, sensor platforms, or edge computing technologies.
  • Knowledge of cryptographic systems, key management systems, and key handling standards.
  • Strong analytical, troubleshooting, and technical communication skills, with the ability to work in a fast-paced startup environment.
  • Must be a U.S. Citizen eligible to work in government facilities and handle sensitive information. Ability to obtain additional security clearances as required by contract.

Nice to have

  • Active security clearance.
  • Experience in defense, aerospace, government contracting, or highly regulated technology environments.
  • Firmware, BIOS/UEFI, TPM, secure boot, cryptographic hardware, or supply chain security experience.
  • Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent.

Culture & Benefits

  • Onsite work with free daily lunch, a fully stocked kitchen, and a casual dress code.
  • Medical, dental, and vision benefits fully paid by the company.
  • 401(k) with a 50% company match up to 6% of pay, plus FSA, HSA, and life insurance.
  • Unlimited PTO, relocation assistance, pre-IPO stock options, and annual bonuses planned.
  • Collaboration within a growing organization of more than 500 employees across five offices.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →