Senior Product Security Engineer
Senior product security engineer at CHAOS Industries (defense tech) in El Segundo, CA, securing next-generation sensor platforms and their software. Day to day: secure architecture, threat modeling and risk assessments, RMF/ATO compliance documentation, security testing, and guiding software/embedded/hardware teams on secure development. Onsite; requires US citizenship.
- Compensation
- $123K–$211K / yr
- Location
- El Segundo, California, United States
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Contract
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years in cybersecurity engineering, product security, application security, or related roles
- Experience with software security design and/or secure system architecture principles
- Hands-on threat modeling and cybersecurity risk assessment experience
- Knowledge of SSDLC practices and application security concepts
- Familiarity with RMF, NIST 800-53, NIST 800-171, and DFARS
- Experience supporting ATO/security authorization, security documentation, and eMASS management
- Experience securing embedded systems, sensor platforms, or edge computing technologies
- Knowledge of cryptographic systems, key management systems, and key handling standards
- Strong analytical, troubleshooting, and technical communication skills
- Ability to operate effectively in a fast-paced startup environment
- U.S. citizen eligible to work in government facilities and handle sensitive information
- Ability to obtain additional security clearances as required by contract
Nice to have
- Active security clearance
- Experience in defense, aerospace, government contracting, or highly regulated environments
- Firmware security or development experience
- BIOS/UEFI security or development experience
- TPM, secure boot, cryptographic hardware, or supply chain security knowledge
- Security certifications such as CISSP, CSSLP, GSEC, or Security+
Full description
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.
CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London. For more information, please visit .
Role:
We are seeking a Senior Cybersecurity Engineer focused on Product Security to help design, assess, and secure our next-generation sensor platforms and supporting software ecosystems. This role will support the Senior Product Security Engineer and work closely with Engineering, Embedded Systems, Infrastructure, and Program teams to ensure security is integrated throughout the product lifecycle — from architecture and development through deployment and operational support.
The ideal candidate has experience securing complex software and hardware systems within defense, aerospace, or other highly regulated environments. This individual will contribute to software security architecture efforts, assist with threat modeling and risk assessments, aid in compliance initiatives, and support the establishment of secure engineering standards across the organization.
This is a highly collaborative and hands-on role with direct impact on the security and resiliency of mission-critical technologies deployed in operational environments.
Responsibilities: System Security Engineering
- Assist with the design and implementation of secure software and hardware system architectures for mission-critical platforms and supporting infrastructure
- Partner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC)
- Enable architecture reviews and identify security risks across software, embedded, real time, and hardware systems
- Document secure design standards, engineering guidance, and product security best practices
- Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation
Threat Modeling & Risk Assessment
- Execute threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure
- Support cybersecurity risk assessments for products, systems, and operational environments
- Map attack surfaces, identify trust boundaries, and harden potential exploitation paths