Senior Cybersecurity Engineer, Product Security

CHAOS Industries is seeking a Senior Cybersecurity Engineer focused on Product Security to help design, assess, and secure next-generation sensor platforms and the supporting software ecosystems. This onsite role in El Segundo, CA partners with engineering and program teams to integrate security across the product lifecycle, from architecture through deployment and operational support.

Role Overview

The successful candidate will lead software security architecture efforts, perform threat modeling and cybersecurity risk assessments, and support compliance-related activities. The position includes establishing secure engineering standards across the organization and contributing to scalable product security processes and governance. The work is collaborative and hands-on, with direct impact on the security and resiliency of mission-critical technologies operating in real-world environments.

Responsibilities

• Design and implement secure software and hardware system architectures for mission-critical platforms and supporting infrastructure
• Partner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC)
• Conduct architecture reviews and identify security risks across software, embedded, cloud, and hardware systems
• Develop secure design standards, engineering guidance, and product security best practices
• Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation
• Lead threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure
• Conduct cybersecurity risk assessments for products, systems, and operational environments
• Identify attack surfaces, trust boundaries, and potential exploitation paths
• Collaborate with engineering teams to prioritize and remediate identified security risks
• Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies
• Support cybersecurity compliance and product authorization efforts, including development of system security documentation, security controls, SSPs, and assessment artifacts
• Support internal and external security audits, assessments, and accreditation activities
• Collaborate with government, customer, and program stakeholders on security requirements and authorization activities
• Assist with security testing activities, including vulnerability assessments and penetration testing coordination, and validation of remediation efforts
• Support secure configuration and hardening efforts across software, operating systems, and embedded environments
• Review software and system telemetry to identify potential security weaknesses or anomalous behavior
• Collaborate with Security Operations and Infrastructure teams to improve enterprise and product security visibility
• Balance security, performance, and operational requirements across Software, Embedded, Hardware, DevOps, and Infrastructure teams
• Support customer and internal security reviews related to deployed technologies and operational environments
• Mentor engineering teams on secure development and security-by-design principles

Required Qualifications

• 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles
• Experience with software security design and secure system architecture principles
• Hands-on experience conducting threat modeling and cybersecurity risk assessments
• Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts
• Familiarity with cybersecurity frameworks and compliance standards, including RMF, NIST 800-53, NIST 800-171, CMMC, and DFARS
• Experience supporting security authorization activities such as ATO processes and security documentation development, and eMASS
• Understanding of cloud, endpoint, network, and identity security concepts
• Strong analytical, troubleshooting, and technical communication skills
• Ability to operate effectively in a fast-paced startup environment
• Must be a U.S. Citizen eligible for government facilities and sensitive information
• Ability to obtain additional security clearances as required by contract

Technologies

• RMF, NIST 800-53, NIST 800-171, CMMC, DFARS
• ATO, eMASS, ITAR, EAR
• Python, PowerShell, Bash
• CISSP, CSSLP, GSEC, Security+
• Microsoft GCC High
• TPM, secure boot, BIOS/UEFI, Firmware
• DevSecOps

Preferred Qualifications

• Active Security Clearance
• Experience supporting defense, aerospace, government contracting, or regulated technology environments
• Experience securing embedded systems, sensor platforms, or edge computing technologies
• Familiarity with export control requirements including ITAR and EAR
• Experience with secure DevSecOps pipelines and automation practices
• Experience with Microsoft GCC High environments and regulated cloud architectures
• Firmware development experience
• BIOS/UEFI security or development experience
• Hardware security design experience
• Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge
• Experience with scripting or automation using Python, PowerShell, or Bash
• Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent

Compensation and Location

• Location: El Segundo, CA (onsite)
• Salary: USD 135,000 - 200,000 per year

Benefits

• Health Benefits: Medical, dental, and vision benefits 100% paid by the company
• 401k with +50% company match up to 6% of pay
• FSA, HSA, life insurance, and more
• Free daily lunch while working onsite
• Fully-stocked kitchen
• Unlimited PTO
• Casual dress code
• Relocation assistance
• Pre-IPO stock option grants
• Competitive base salaries

Recruiting Notice

CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.