Senior Product Security Engineer

CHAOS Industries is seeking a Senior Product Security Engineer to strengthen product security across next-generation sensor platforms and the supporting software ecosystems. This onsite role in Los Angeles focuses on designing, assessing, and securing products from architecture and development through deployment and ongoing operational support in highly regulated environments.

Role focus

• Design and implement secure software and hardware system architectures for mission-critical platforms and supporting infrastructure
• Integrate security requirements throughout the software development lifecycle (SDLC) in partnership with engineering teams
• Enable architecture reviews and identify security risks across software, embedded, real time, and hardware systems
• Execute threat modeling for software, embedded systems, hardware platforms, and supporting infrastructure
• Support cybersecurity risk assessments for products, systems, and operational environments
• Map attack surfaces, identify trust boundaries, and harden potential exploitation paths
• Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies
• Work with engineering teams to prioritize and remediate identified security risks
• Balance security, performance, and operational requirements with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams

Security documentation, compliance, and authorization

• Document secure design standards, engineering guidance, and product security best practices
• Contribute to cybersecurity compliance initiatives and product authorization efforts, including RMF (Risk Management Framework) and ATO (Authority to Operate)
• Develop and support system security documentation, security controls, SSPs, and assessment artifacts
• Support internal and external security audits, assessments, and accreditation activities
• Collaborate with government, customer, and program stakeholders on security requirements and authorization activities
• Document security boundaries for both hardware and software
• Support customer and internal security reviews related to deployed technologies and operational environments
• Contribute to the development of scalable product security processes and governance

Secure development, testing, and operational visibility

• Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation
• Design security testing activities, including vulnerability assessments and penetration testing coordination, and validation of remediation efforts
• Support secure configuration and hardening across software, operating systems, and embedded environments
• Review software and system telemetry to identify potential security weaknesses or anomalous behavior
• Collaborate with Security Operations and Infrastructure teams to improve product and enterprise security visibility
• Guide engineering teams on secure development and security-by-design principles

Required qualifications

• 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles
• Experience with software security design and/or secure system architecture principles
• Hands-on experience supporting threat modeling and cybersecurity risk assessments
• Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts
• Familiarity with cybersecurity frameworks and compliance standards including RMF, NIST 800-53, NIST 800-171, and DFARS
• Experience supporting security authorization activities such as ATO processes and security documentation development, and eMASS management
• Experience securing embedded systems, sensor platforms, or edge computing technologies
• Knowledge of cryptographic systems, key management systems, and key handling standards
• Strong analytical, troubleshooting, and technical communication skills
• Ability to operate effectively in a fast-paced startup environment
• Must be a U.S. Citizen eligible to work in government facilities and handle sensitive information
• Ability to obtain additional security clearances as required by contract

Preferred qualifications

• Active Security Clearance
• Experience supporting defense, aerospace, government contracting, or highly regulated technology environments
• Firmware security or development experience
• BIOS/UEFI security or development experience
• Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge
• Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent

Tools and standards

• RMF, ATO, NIST 800-53, NIST 800-171, DFARS, eMASS

Compensation and location

• Location: Los Angeles, CA (onsite)
• Salary: USD 123,000 - 211,000 per yearly

Benefits

• Medical, dental, and vision benefits 100% paid for by the company
• 401k with +50% company match up to 6% of pay
• FSA and HSA
• Life insurance
• Free daily lunch while working onsite
• Fully-stocked kitchen
• Unlimited PTO
• Casual dress code
• Competitive base salaries
• Generous pre-IPO stock option grants
• Relocation assistance

Note on submissions: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.