Product Security Engineer Zachary Piper Solutions is seeking a Product Security Engineer to support a leading Defense Technology Company focused on autonomous systems and advanced technologies supporting Department of Defense programs. This is a hybrid position based in Clarksburg, MD. The Product Security Engineer will support cybersecurity initiatives across autonomous vehicle platforms and mission-critical defense programs, helping to ensure products meet security, compliance, and operational requirements throughout the development lifecycle. Responsibilities of the Product Security Engineer Include: • Support product security initiatives across autonomous vehicle platforms and defense technology programs. • Assist with DoD RMF, ATO, and IATT activities, including security documentation, control implementation, POA&M management, and coordination with government stakeholders. • Perform security assessments, vulnerability analysis, and security reviews throughout the software and hardware development lifecycle. • Conduct threat modeling and cybersecurity risk assessments for embedded systems, autonomous platforms, and command-and-control technologies. • Support DISA STIG compliance activities and collaborate with software, hardware, and DevOps teams to implement security requirements. • Manage vulnerability remediation efforts, including CVE analysis, SBOM validation, risk prioritization, and tracking corrective actions. • Assist with security testing activities, including vulnerability scanning, configuration reviews, and secure code review processes. • Develop and maintain security documentation, procedures, and technical guidance. • Support incident response and forensic investigations involving product-level cybersecurity events. • Collaborate with engineering teams to integrate secure development practices and DevSecOps methodologies. • Track authorization status, security metrics, and compliance requirements and provide updates to leadership and program stakeholders. • Support proposal efforts, customer engagements, and cybersecurity-related technical discussions. Qualifications of the Product Security Engineer Include: • 7+ years of experience in Product Security, Cybersecurity, Information Assurance, Security Engineering, or a related field. • Experience supporting DoD RMF, ATO, IATT, or other federal cybersecurity compliance activities. • Working knowledge of NIST 800-37, NIST 800-53, NIST 800-171, DISA STIGs, SRGs, and eMASS. • Experience conducting vulnerability management, security assessments, threat modeling, or risk analysis activities. • Familiarity with embedded systems, autonomous platforms, industrial control systems, or mission-critical technologies. • Understanding of secure software development practices and DevSecOps principles. • Experience managing or reviewing SBOMs and evaluating software supply chain risks. • Strong written and verbal communication skills with the ability to work across technical and non-technical teams. • Knowledge of cybersecurity frameworks such as NIST RMF, CMMC, ISO 27001, ISO/SAE 21434, or IEC 62443. • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field preferred. • Security certifications such as Security+, CySA+, CISSP, SSCP, GSEC, or equivalent are highly desirable. Compensation for the Product Security Engineer Includes: • Salary Range: $170,000 - $195,000 • Comprehensive Benefits: Cigna Medical, Dental, Vision, 401(k), Sick Leave if required by law, and Paid Holidays. Keywords: Product Security, Product Security Engineer, Cybersecurity Engineer, Security Engineer, Application Security, DevSecOps, RMF, Risk Management Framework, ATO, Authority to Operate, IATT, NIST 800-37, NIST 800-53, NIST 800-171, DISA STIG, eMASS, SBOM, Vulnerability Management, Threat Modeling, CVE Management, Security Compliance, Embedded Systems Security, Autonomous Systems, Defense Technology, Software Security, Security Assessments, Risk Analysis, CMMC, ISO 27001, ISO/SAE 21434, IEC 62443, Security+, CISSP, Secret Clearance, Department of Defense, DoD Cybersecurity. #LI-JL1