Product Security Engineer

CHAOS Industries•El Segundo, CA

15h•Onsite

About The Position

CHAOS Industries is seeking a Cybersecurity Engineer focused on Product Security to help design, assess, and secure next-generation sensor platforms and supporting software ecosystems. The role supports the Senior Product Security Engineer and works with Engineering, Embedded Systems, Infrastructure, and Program teams to integrate security throughout the product lifecycle, from architecture and development through deployment and operational support. The position contributes to software security architecture, threat modeling, risk assessments, compliance initiatives, and secure engineering standards. It is a collaborative, hands-on role supporting mission-critical technologies in operational environments. The successful candidate will help secure software and hardware systems, support authorization and compliance activities, coordinate security testing and remediation, and guide teams on security-by-design principles. CHAOS Industries is headquartered in Los Angeles and has offices in Washington, D.C., San Francisco, San Diego, and London. The company reports a team of more than 500 employees across five global offices.

Requirements

At least 2 years of experience in cybersecurity engineering, product security, application security, or related engineering roles.
Experience with software security design and/or secure system architecture principles.
Hands-on experience supporting threat modeling and cybersecurity risk assessments.
Knowledge of secure software development lifecycle practices and application security concepts.
Familiarity with RMF, NIST 800-53, NIST 800-171, and DFARS.
Experience supporting security authorization activities such as ATO processes, security documentation development, and eMASS management.
Experience securing embedded systems, sensor platforms, or edge computing technologies.
Knowledge of cryptographic systems, key management systems, and key handling standards.
Strong analytical, troubleshooting, and technical communication skills.
Ability to operate effectively in a fast-paced startup environment.
Must be a U.S. Citizen eligible to work in government facilities and handle sensitive information.
Ability to obtain additional security clearances as required by contract.

Nice To Haves

Active security clearance.
Experience supporting defense, aerospace, government contracting, or highly regulated technology environments.
Firmware security or development experience.
BIOS/UEFI security or development experience.
Knowledge of Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security.
Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent.

Responsibilities

Assist with designing and implementing secure software and hardware system architectures for mission-critical platforms and supporting infrastructure.
Partner with engineering teams to integrate security requirements throughout the software development lifecycle.
Enable architecture reviews and identify security risks across software, embedded, real-time, and hardware systems.
Document secure design standards, engineering guidance, and product security best practices.
Support secure development initiatives, including code review, dependency management, secrets management, and vulnerability remediation.
Execute threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure.
Support cybersecurity risk assessments for products, systems, and operational environments.
Map attack surfaces, identify trust boundaries, and harden potential exploitation paths.
Work with engineering teams to prioritize and remediate identified security risks.
Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies.
Contribute to cybersecurity compliance initiatives and product authorization efforts, including RMF and ATO activities.
Develop system security documentation, security controls, SSPs, and assessment artifacts.
Support internal and external security audits, assessments, and accreditation activities.
Collaborate with government, customer, and program stakeholders on security requirements and authorization activities.
Document security boundaries for hardware and software.
Design security testing activities, including vulnerability assessments, penetration testing coordination, and remediation validation.
Support secure configuration and hardening across software, operating systems, and embedded environments.
Review software and system telemetry to identify potential security weaknesses or anomalous behavior.
Collaborate with Security Operations and Infrastructure teams to improve product and enterprise security visibility.
Work with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational requirements.
Contribute to scalable product security processes and governance.
Support customer and internal security reviews related to deployed technologies and operational environments.
Guide engineering teams on secure development and security-by-design principles.