Product Security

Product Security Engineer Jobs

11 jobs found

Today

Security Engineer (Linux Systems Engineer)

Navy Federal Credit Union Vienna, VA

Vienna, VA

Today

$99k - $156k/yr Full time Ai Security Cybersecurity Tools Data Security

Apply Now

Job Description

Join Navy Federal Credit Union’s Advanced Cyber Initiatives team and support the deployment, maintenance, troubleshooting, and hardening of enterprise security applications and systems with a strong focus on Linux systems engineering. This onsite role partners closely with the Platform Engineering manager and collaborates with Information Security teams to keep cybersecurity solutions running reliably across on prem, SaaS, and IaaS environments.

Salary: USD 99,400 - 155,850 per year. Location: onsite in Vienna, VA (additional locations listed include Pensacola, FL and Winchester, VA). Hours: Monday through Friday, with flexible scheduling within core office hours of 7:00AM-6:00PM ET.

What You’ll Do

Support maintenance of IT and enterprise class security applications and systems for NFCU
Troubleshoot Linux and/or Windows server operating systems and the enterprise applications running on them
Deploy, optimize, and maintain enterprise security applications across on prem, SaaS, and IaaS
Remediate vulnerabilities on Windows and/or Linux systems while maintaining stability through monitoring, patching, and administration
Deploy and configure SaaS enterprise applications
Deploy AI, agentic solutions, and ML/LLM technologies to address modern security threats
Maintain internal engineering documentation, including tool documentation, lessons learned, procedures, and status updates
Renew and update TLS certificates on appliances and enterprise applications
Respond to audit and enterprise hardening requests
Update stories and subtasks in progress, and provide updates during Daily Operations briefings
Monitor the daily ticket queue for incidents and work ingestion, then assign as required
Perform quarterly access reviews
Support on-call and after-hours rotation
Perform other duties as assigned

Required Qualifications

Bachelor’s Degree in Computer Science, Information Technology, Engineering, or a related discipline (or equivalent combination of education and experience)
Extensive hands-on experience automating or scripting server configurations and deployments
Extensive hands-on experience patching and upgrading Linux and Windows operating systems, packages, and applications
Experience in enterprise high security systems engineering (PCI-DSS/NCUA best practices ideal)
Experience with AI, agentic solutions, and ML/LLM solutions in practice and/or deployment
Scripting experience in at least one: Ansible, Python, Bash, PowerShell, Ruby, etc.
Experience and thorough understanding of SSO/SAML/OAUTH integration for enterprise applications
Strong troubleshooting ability for Linux distributions (CentOS, Red Hat, Ubuntu, and/or Cisco derivative OS) OR strong troubleshooting ability for Windows server OS
Experience in environments with infrastructure management processes (change management, problem management, configuration management, and project management)
Hands-on experience with Agile, specifically Kanban
Experience using/integrating tools with SIEM systems
Ability to work in environments requiring detailed ticketing, coordination, siloed workflows, and change control
Knowledge of core networking concepts (firewall, routing, switching, load balancing, proxy principles) and troubleshooting from a server deployment/maintenance perspective

Technology & Tools

Linux, Windows
TLS certificates, TLS
AI, agentic solutions, ML/LLM’s
Ansible, Python, Bash, PowerShell, Ruby
SSO, SAML, OAUTH
SIEM
CentOS, Red Hat, Ubuntu, Cisco derivative OS’s
PCI-DSS, NCUA
Agile, Kanban, Jira, Confluence
SaaS, IaaS, on prem
Java, Tomcat, COTS, .net, IIS
Packet capture

Additional Information

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.
Advanced Cyber Initiatives is seeking a driven professional to help advance the program’s strategic vision.
The role works closely with the Platform Engineering manager and collaborates with Information Security teams for deployment and maintenance of cybersecurity enterprise applications.

View full job page →

1d ago

Product Security Engineer

Meta Menlo Park, CA

Menlo Park, CA

1d ago

$154k - $217k/yr Full time Application Security Incident Response Information Security

Apply Now

Job Description

Meta’s Security Engineering team is looking for a Product Security Engineer to help uncover and reduce security vulnerabilities across Meta’s infrastructure, applications, and platforms. In this onsite role in Menlo Park, you will work closely with engineering and product teams to create security improvements that hold up at scale.

This position blends offensive and defensive security expertise, with a focus on turning findings into repeatable patterns, scalable tooling, and durable mitigations across the organization.

Responsibilities

Perform security assessments, threat modeling, and code reviews across Meta products and infrastructure to identify and remediate vulnerabilities
Build and roll out scalable security tooling, automation, and frameworks to detect and prevent security issues throughout the engineering organization
Partner with engineering and product teams to embed security requirements into the design and development lifecycle
Investigate security incidents and lead root cause analysis, then translate results into systemic mitigations and process improvements
Spot gaps in security coverage and coordinate cross-functional efforts to close them through tooling, policy, or architectural changes
Convert one-off vulnerability discoveries into repeatable detection and remediation patterns that scale across the codebase
Represent the security team in cross-functional collaborations by communicating risk posture and mitigation strategies to engineering leadership
Mentor engineers on secure coding practices, vulnerability classes, and security review methodologies
Manage and independently resolve security incidents, coordinating with cross-functional partners to drive timely remediation

Requirements

5+ years of experience in security engineering, including vulnerability research, penetration testing, or security assessments for applications and infrastructure
Experience identifying and exploiting common vulnerability classes, including memory corruption, injection flaws, authentication bypasses, or privilege escalation
Experience developing security tooling, automation, or detection frameworks using one or more general-purpose programming or scripting languages
Experience conducting threat modeling and security design reviews for large-scale distributed systems or web and mobile applications
Experience collaborating with cross-functional engineering teams to drive security mitigations and communicate risk in written and verbal formats
Bachelor’s or Master’s degree in Computer Science or a related field, or equivalent technical security experience

Preferred Qualifications

Demonstrated ongoing AI skill development (for example, prompt/context engineering or agent orchestration) and staying current with emerging AI technologies
Demonstrated ability to integrate AI tools to optimize or redesign workflows and drive measurable impact such as efficiency gains or quality improvements
Experience adhering to and implementing responsible, ethical AI practices, including risk assessment, bias mitigation, and quality and accuracy reviews
Familiarity with security challenges specific to large-scale social platforms, including account integrity, data access controls, and API security
Experience building static or dynamic analysis tools to identify security vulnerabilities at scale across large codebases
Contributions to the security community through public research, vulnerability disclosures, bug bounty programs, conference presentations, or open-source tooling
Experience across both offensive security (for example, red teaming or exploit development) and defensive security engineering (for example, detection engineering or secure architecture design)

Location: Menlo Park, CA (onsite)
Compensation: USD 154,000 - 217,000 per year
Minimum experience: 5 years
Education: Bachelor’s or Master’s degree in Computer Science or related field

View full job page →

1d ago

Senior Systems Engineer - Cybersecurity / ISSO

Integral Tysons Corner, VA

Tysons Corner, VA

1d ago

$120k - $135k/yr Full time Senior Authorization To Operate Cloud Platforms

Apply Now

Job Description

Integral is hiring a Senior Systems Engineer – Cybersecurity / ISSO to support Army biometric systems as a contractor Information System Security Officer (ISSO). Based onsite in Tysons Corner, VA, this role helps maintain cybersecurity posture through RMF/ATO documentation and continuous-monitoring activities, while contributing to technical security engineering and sustainment. The position offers $120,000–$135,000 per year and a benefits package that includes medical, time off, training support, and 401(k) immediate vesting.

What you’ll do

Act as the contractor ISSO and serve as the primary interface with Government ISSM/ISO/SCA cybersecurity personnel.
Maintain RMF authorization documentation and cybersecurity artifacts in eMASS.
Track and update ATO/Assess Only status, including SSP/control evidence, POA&M, STIG status, scan results, and continuous-monitoring documentation.
Perform or coordinate ACAS vulnerability scanning, STIG assessments, IAVA/IAVM response, and security-control validation.
Produce recurring cybersecurity status reports and provide Government-required cybersecurity information.
Coordinate technical remediation with cloud, platform, network, and DevOps engineering teams, and verify corrective actions.
Support AWS GovCloud security, including IAM, logging, encryption, network-security configuration, and security monitoring.
Support system hardening and implementation of security controls across Linux, Windows, cloud, network, and application components.
Maintain cybersecurity documentation tied to architecture, configuration, software, or infrastructure changes.
Support security incident-response planning and execution, along with disaster-recovery/contingency-planning exercises and associated cybersecurity artifacts.
When not focused on ISSO tasks, perform broader systems-engineering, cloud-security, configuration, testing, and technical-analysis activities.
Cross-train with other BPS Systems Engineers to maintain continuity.

Requirements

Bachelor’s Degree in a relevant engineering discipline
Seven (7) years of professional experience in systems engineering
Hands-on experience supporting DoD/Army RMF and eMASS
Experience maintaining an active ATO and continuous-monitoring program
POA&M management
Knowledge of NIST 800-53 / NIST 800-37
Experience with software integration or testing, including analyzing and implementing test plans and scripts; understanding of ANSI/NIST ITL and the DoW Electronic Biometric Transmission Specification (EBTS)
Familiarity with biometric systems, plus knowledge of system-of-systems engineering and integration directorate processes
Experience with DevOps practices and tools, including CI/CD
Strong analytical, problem-solving, and critical thinking skills
Secret security clearance

Preferred

AWS GovCloud/cloud security
STIG Viewer/Evaluate-STIG
IAM and cloud-security architecture
Linux/Windows security hardening
Security incident response and disaster recovery

Tools and technologies

eMASS, RMF, ATO, POA&M, STIG
ACAS, IAVA/IAVM
AWS GovCloud, IAM, DevOps, CI/CD
NIST 800-53, NIST 800-37
ANSI/NIST ITL, DoW Electronic Biometric Transmission Specification (EBTS)

Integral benefits

Medical, Dental & Vision Insurance
Flexible Spending Accounts
Short-Term and Long-Term Disability Insurance
Life Insurance
Paid Time Off & Holidays
Earned Bonuses & Awards
Professional Training Reimbursement
Employee Assistance Program
Paid parental leave
Immediate vesting in the 401(k)

View full job page →

2d ago

Cybersecurity Associate Engineer

Rule4 Boulder, CO

Boulder, CO

2d ago

$70k - $95k/yr Full time Cyber Forensics Cyber Security Associate Cybersecurity Tools

Apply Now

Job Description

Join Rule4 in Boulder, CO onsite to support cybersecurity assessments, investigations, and client consulting.

Responsibilities

Assess and improve infrastructure and application cybersecurity, with focus on performance and availability
Write detailed, high-value documentation covering technology reviews, incident findings, application vulnerabilities, and cybersecurity program plans
Support application and infrastructure penetration testing activities
Run periodic vulnerability scans for systems and networks using tools such as Nessus, Nmap, and Wireshark
Investigate suspected cybersecurity breaches and perform forensic investigations
Build and maintain client relationships; generate new clients independently
Lead complete sales cycles, including proposal writing and deal closing
Collaborate with experienced engineers and clients across industries, supporting efforts to strengthen cybersecurity posture and protect sensitive data
Participate in client workshops and hands-on work ranging from forensic support to consulting engagements
Work with guidance from senior team members as you develop problem-solving skills for challenges without a documented answer

Requirements

Strong client-focused work ethic
Passion for technology
Ability to multitask and re-prioritize quickly in a fast-paced, high-action environment
Strong attention to detail and drive for incremental improvements
Hands-on experience in a production environment using relevant technologies
Excellent consulting, communication, and relationship-building skills
4-year college degree, or progress toward completing such a degree
Occasional travel (2-3x/year)
Experience in an IT Ops role such as helpdesk, system administrator, or network administrator
Proof of current COVID-19 vaccination status for employment at Rule4
Flu vaccinations required
Due to government contract requirements, must be a US Citizen

Technologies

Nessus
Nmap
Wireshark

Compensation

$70,000 - $95,000 per year (based on credentials and experience)

Benefits

Generous PTO
Health, Dental, Life Insurance
Flexible Schedule
$1,000 Outdoor Pass
Parental Leave
401k Matching
Sabbatical
Professional Development
Dog-Friendly Office
Charitable Match
Paid Volunteer Time
Cell Phone Reimbursement
Team Retreats
Micro-Bonuses
Partial Remote Work Options
4-day workweek

Location: Boulder, CO (onsite)

View full job page →

2d ago

Security Engineer

Cisco Systems Research Triangle Park, NC

Research Triangle Park, NC

2d ago

$129k - $256k/yr Full time Cloud Platforms Cloud Security Cyber Security

Apply Now

Job Description

Design, deploy, and operationalize security controls across cloud and on-prem systems while improving automated response, forensics, and threat hunting.

Responsibilities

Lead the design and deployment of security sub-components and features across cloud and on-premises environments to help intercept emerging risks.
Develop and refine automated incident response playbooks to optimize Mean Time to Respond (MTTR) and improve operational efficiency.
Perform deep-dive forensic investigations and conduct hypothesis-based threat hunting to identify stealthy adversaries that bypass traditional controls.
Collaborate with DevOps and engineering teams to remediate vulnerabilities while supporting compliance through technical leadership and code reviews.
Mentor junior engineers and provide architectural guidance to strengthen Cisco’s security defenses and sustainability solutions.

Requirements

Bachelor’s degree in Cybersecurity, Information Assurance, or a related technical field.
3–5 years of professional experience in a Security Operations Center (SOC) or a security-focused engineering role.
Experience working with SIEM, EDR, and Vulnerability Management platforms in a hybrid enterprise environment.
Proficiency applying current security frameworks and secure coding principles.
Experience building or maintaining security tools and services within a formal development lifecycle.

Technologies

SIEM, EDR, Vulnerability Management platforms
Wiz.io
Tenable Nessus
Splunk
Cisco Secure Suite
Trend Micro
CrowdStrike
SentinelOne
Microsoft Defender
AWS, Azure

Preferred Qualifications

Hands-on experience with Wiz.io, Tenable Nessus, Splunk, and the Cisco Secure Suite.
Technical proficiency with Trend Micro, CrowdStrike, SentinelOne, or Microsoft Defender.
Familiarity with cloud-native security environments, specifically AWS or Azure.
Professional certifications such as CompTIA CySA+, PenTest+, Security+, AWS Certified Cloud Practitioner, or ISC2 SSCP.
Strong communication skills to collaborate with DevOps teams on remediation and patching strategies.

Location and Salary

Location: Research Triangle Park, NC (onsite)
Salary: USD 128,600 - 256,000 per yearly
Application window expected to close on: 10/30/2026

Benefits

Medical, dental and vision insurance
401(k) plan with a Cisco matching contribution
Paid parental leave
Short and long-term disability coverage
Basic life insurance
10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco
Non-exempt employees: 16 days of paid vacation time per full calendar year (accrued at rate of 4.92 hours per pay period for full-time employees)
Exempt employees participate in Cisco’s flexible vacation time off program (no defined limit on how much vacation time eligible employees may use, subject to availability and some business limitations)
80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next
Additional paid time away may be requested to deal with critical or emergency issues for family members
Optional 10 paid days per full calendar year to volunteer
Annual bonuses for non-sales roles, subject to Cisco’s policies
Employees on sales plans: performance-based incentive pay on top of base salary (quota and non-quota components), subject to the applicable Cisco plan

U.S. and/or Canada Applicant Pay Notes

The starting salary range posted reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation, equity, or benefits.
Individual pay depends on hiring location, market conditions, job-related skillset, experience, qualifications, education, certifications, and/or training.
U.S. employees are eligible for benefits subject to Cisco’s plan eligibility rules, including medical, dental and vision insurance; a 401(k) plan with a Cisco matching contribution; paid parental leave; short and long-term disability coverage; and basic life insurance.
Employees may be eligible for grants of Cisco restricted stock units that vest following continued employment with Cisco for defined periods of time.

Applicable Full Salary Ranges by State

New York City Metro Area: $155,000.00 - $256,000.00
Non-Metro New York state & Washington state: $138,100.00 - $227,900.00
Employees in Illinois: participate in a unique time off program to meet local requirements (exempt or non-exempt).

View full job page →

4d ago

Sr. Cyber Security Engineer

SecuriGence Arlington, VA

Arlington, VA

4d ago

$175k - $220k/yr Full time Senior Cyber Security Cybersecurity Tools

Apply Now

Job Description

SecuriGence is seeking a Sr. Cyber Security Engineer to support systems security in Arlington, VA onsite. The role focuses on strengthening network defense and incident response capabilities, maturing Splunk and the broader security stack for DoD-specific environments, and delivering security assessments, training, and customer-facing reporting.

Key Responsibilities

Analyze the security of hardware (SoC, MCU, etc.) and low-level operating system components for consumer devices.
Provide systems security support to protect information system assets.
Implement technology aligned to client mission needs to enable network defense, vulnerability management, and incident response.
Assess and review risks, partnering with product engineers to develop mitigations.
Develop and execute policies, standards, and procedures.
Develop, deliver, and promote security training to raise awareness and educate product engineers on relevant technologies.
Research current methodologies, trends, threats, vulnerabilities, and technology frameworks.
Serve as a Splunk subject matter expert, engineering and maintaining multiple clustered instances.
Implement and maintain security stack components, including IDS/IPS, firewalls, SIEM, and host-based security systems.
Improve existing Splunk instances to support robust incident detection and insider threat programs.
Build system configuration baselines using the Security Content Automation Protocol (SCAP) for Windows and UNIX/Linux operating systems.
Engineer event log correlation solutions to support effective customer response to security incidents.
Conduct incident response actions based on detected events and incidents.
Validate and develop cybersecurity requirements.
Develop cybersecurity engineering solutions across multiple security domains.
Collaborate with technical and functional stakeholders to support engineering tasks.
Provide customers with reports and other informational products.
Perform other duties as assigned.

Required Qualifications

Bachelor's degree.
4+ years of relevant experience.
8570 IAT Level 2 Certification (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP) required.
TS/SCI required.

Knowledge, Skills, and Abilities

Experience building and maintaining Splunk instances in a DoD-specific environment.
Experience using Splunk or other SIEM tools to correlate events, identify potential security incidents, determine root cause, and coordinate with the CIRT team to perform incident response actions.
Proficiency with UNIX/Linux and Windows system administration and configuration.
Networking proficiency including routing, switching, and subnetting.
Familiarity with deploying security functions in virtualized environments (VMware and Hyper-V).
Familiarity with Windows, UNIX/Linux, and application logs such as database and web server logs.
Experience implementing and auditing DISA STIG hardening configurations.
Working knowledge of database and operating system security.
Understanding of modern security principles, techniques, and protocols.
Ability to operate in a fast-paced environment while managing multiple tasks and coordinating resources to meet scheduled goals.
Excellent verbal and written communication skills required.

Technologies

Splunk
SIEM
IDS/IPS
Firewalls
Security Content Automation Protocol (SCAP)
VMware
Hyper-V
Windows
UNIX/Linux

Growth, Benefits, and Culture

At Chenega MIOS, the professional development plan focuses on helping team members at every career level identify strengths and apply them to do their best work every day. The organization also emphasizes a positive, supportive culture and a purpose-driven approach to make an impact that matters.

Compensation and Location

Location: Arlington, VA (onsite). Salary: USD 175,200 - 220,000 per yearly.

View full job page →

27d ago

Embedded System Security Engineer

Belcan Indianapolis, IN

Indianapolis, IN

27d ago

$90k - $160k/yr Full time Embedded Systems Embedded Systems Security Information Security

Apply Now

Job Description

This Embedded System Security Engineer role supports cyber-physical embedded systems for engine controls on airborne platforms, with a focus on system security and secure cyber-resilient implementations.

Responsibilities

Define the technology and processes needed to satisfy product requirements for system security against cyber threats.
Assist customer programs with secure cyber resilient system (SCRS) implementation, including:
- Task planning
- Requirements development, derivation, and implementation
- Risk assessments using appropriate tools and methods
- Completion of product lifecycle deliverables
Evaluate existing product designs and development plans to identify gaps in product security scope and ensure alignment with contract requirements.
Develop, explain, and drive product security best practices across product teams and design teams to improve adoption and implementation.
Coordinate with the product security capability team to strengthen techniques, policies, procedures, and knowledge used across the business.
Collaborate with customers, customer clients, supply-chain partners, and industry experts to advance product security capability and tools for customer programs.

Requirements

U.S. Citizenship required due to the nature of the work.
Education:
- Bachelor’s degree in Cybersecurity or a STEM discipline (Electrical, Systems, Controls or equivalent) plus 6+ years experience, or
- Master’s degree plus 4+ years experience
Working knowledge of embedded systems and the technical skills to develop, implement, and secure cyber-physical embedded systems.
Experience applying systems security policies and standards, including:
- Risk Management Framework (RMF)
- NIST SP 800-160
- DO-326
- DoDI 5000.83
Knowledge of program management lifecycle processes, procedures, and best practices.
Ability to operate in a fast-paced dynamic hybrid environment, including work with virtual teams.
Strong interpersonal skills for inquisitive, communicative collaboration using both verbal and non-verbal communication with teams, customers, and stakeholders.
Travel periodically up to 25%.

Technologies / Tools

Risk Management Framework (RMF)
NIST SP 800-160
DO-326, DO-326A, DO-355
DoDI 5000.83
Sharpcloud
MS Azure DevOps
Earned value management

Benefits

Health care
Dental
Vision
Life insurance
401(k)
Education assistance
Paid time off including PTO
Holidays
Any other paid leave required by law

Preferred Qualifications

Familiarity with industry guidance and standards such as DO-326A and DO-355, including certification-related project artifact development and project execution (including Stages of Involvement (SOI)).
Experience or interest in product security efforts, cybersecurity, and cyber threats.
Experience with project management concepts (earned value management), process change management, configuration management, and data analysis.
Experience with tools such as Sharpcloud and MS Azure DevOps.
Outcome-focused problem-solving approach.