Ssp Authoring Engineer Jobs

1 job found

Today

Product Security Engineer

CHAOS Industries Los Angeles, CA

Los Angeles, CA

Today

$101k - $170k/yr Full time Application Security Product Security Engineering Rmf

Apply Now

Job Description

CHAOS Industries is building next-generation sensor platforms and supporting software ecosystems, and the team needs a Product Security Engineer to help secure mission-critical products across the full lifecycle. This onsite role in Los Angeles supports the design, assessment, and operational hardening of deployed technologies, integrating security into architecture and development from early planning through accreditation activities.

Role Overview

You will work across software, embedded, real-time, and hardware systems to embed security through architecture and development, deployment, and operational support. The work includes threat modeling, security risk assessments, secure design documentation, and coordination of security testing and remediation.

Key Responsibilities

Assist with the design and implementation of secure software and hardware system architectures for mission-critical platforms and supporting infrastructure
Partner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC)
Enable architecture reviews and identify security risks across software, embedded, real-time, and hardware systems
Document secure design standards, engineering guidance, and product security best practices
Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation
Execute threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure
Support cybersecurity risk assessments for products, systems, and operational environments
Map attack surfaces, identify trust boundaries, and harden potential exploitation paths
Work with engineering teams to prioritize and remediate identified security risks
Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies
Contribute to cybersecurity compliance initiatives and product authorization efforts, including RMF, ATO, security controls, SSPs, and assessment artifacts
Support internal and external security audits, assessments, and accreditation activities
Collaborate with government, customer, and program stakeholders on security requirements and authorization activities
Document security boundaries for both hardware and software
Design security testing activities including vulnerability assessments and penetration testing coordination, and validate remediation efforts
Support secure configuration and hardening efforts across software, operating systems, and embedded environments
Review software and system telemetry to identify potential security weaknesses or anomalous behavior
Collaborate with Security Operations and Infrastructure teams to improve product and enterprise security visibility
Work closely with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational requirements
Contribute to scalable product security processes and governance
Support customer and internal security reviews related to deployed technologies and operational environments
Guide engineering teams on secure development and security-by-design principles

Required Qualifications

2+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles
Experience with software security design and/or secure system architecture principles
Hands-on experience supporting threat modeling and cybersecurity risk assessments
Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts
Familiarity with cybersecurity frameworks and compliance standards including RMF, NIST 800-53, NIST 800-171, and DFARS
Experience supporting security authorization activities such as ATO processes and security documentation development, and eMASS management
Experience securing embedded systems, sensor platforms, or edge computing technologies
Knowledge of cryptographic systems, key management systems, and key handling standards
Strong analytical, troubleshooting, and technical communication skills
Ability to operate effectively in a fast-paced startup environment
Must be a U.S. Citizen eligible to work in government facilities and handle sensitive information
Ability to obtain additional security clearances as required by contract

Preferred Qualifications

Active Security Clearance
Experience supporting defense, aerospace, government contracting, or highly regulated technology environments
Firmware security or development experience
BIOS/UEFI security or development experience
Knowledge of Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security
Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent

Technologies

RMF (Risk Management Framework)
ATO (Authority to Operate)
NIST 800-53
NIST 800-171
DFARS
eMASS
SSDLC
SSPs

Compensation and Location

Location: Los Angeles, CA (onsite)
Salary Range: USD 101,000 - 170,000 per year

Benefits

Medical, dental, and vision benefits 100% paid for by the company
401k with + 50% company match up to 6% of pay
FSA
HSA
Life insurance
Free daily lunch while working onsite
Fully-stocked kitchen
Unlimited PTO
Casual dress code
Competitive base salaries
Generous pre-IPO stock option grants
Relocation assistance
(Coming soon!) Annual bonuses

Note: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.

View full job page →

Get Ssp Authoring Engineer Jobs alerts

New Ssp Authoring Engineer Jobs, daily.