Staff Product Security Systems Engineer

nLIGHT • Longmont, CO

35d • $120,000 - $1,600,000 • Onsite

About The Position

We are seeking a skilled and motivated Product Security Systems Engineer to join our team. The ideal candidate will be a broad systems thinker with strong analytical ability, hands-on cybersecurity engineering experience, and proficiency applying Model-Based Systems Engineering (MBSE) principles to develop cybersecurity‑focused system architectures.

This role centers on designing, implementing, and validating product-level cybersecurity protections for High Energy Laser (HEL) Weapon Systems and HEL Beam Control Systems (BCS). The candidate will own cybersecurity modeling in Cameo, produce system and network security artifacts, guide architecture decisions, and work closely with software, firmware, and systems engineering teams to ensure secure and coherent system development.

This engineer will also serve as a primary cybersecurity interface with customers, support product cybersecurity requirement interpretation and implementation, prepare systems for assessment activities (IATT/IATC), and help drive secure design choices for critical access points and mission interfaces.
All applicants must possess or be qualified to obtain a U.S. DoD Personnel Security Clearance. Preference will be given to candidates with an existing clearance. Information on the clearance process can be found at: https://www.dcsa.mil/mc/pv/mbi/gicp/.

Requirements

• Commitment to excellence. Attention to detail. Pride in workmanship.
• Ability to work in a dynamic, fast-paced environment and maintain strong working relationships under pressure.
• 5+ years experience in systems engineering or product cybersecurity engineering.
• Experience with MBSE tools such as Cameo Systems Modeler.
• Hands-on cybersecurity implementation experience (networking, secure protocols, access control, system hardening, configuration management practices).
• Ability to interface effectively with software and firmware development teams.
• Ability to manage long-range schedule objectives with minimal daily direction.
• Strong analytical and problem‑solving ability with experience absorbing information from diverse sources.
• Experience with MATLAB or software development languages (C, C++, C#, Java).
• Ability to generate and track Technical Performance Measures (TPMs) and cyber-relevant metrics.
• Good technical writing and documentation skills.
• Bachelor’s or Master’s degree in Systems Engineering, Cybersecurity, Electrical Engineering, Computer Science, or a related field.

Nice To Haves

• Experience with electro-optical systems or HEL/HEL‑BCS systems.
• Knowledge of DoDAF, SysML security patterns, or architecture frameworks.
• Experience with RMF, NIST 800‑53 security controls, and similar cybersecurity assurance processes.
• Experience supporting IATT/IATC or other cybersecurity accreditation activities.
• Experience with secure software development practices, Agile workflows, or GitLab CI/CD.
• Experience defining and evaluating cybersecurity requirements for high-power laser or EO systems.
• Experience in command/data communication systems and secure interfaces.
• Firmware development, secure boot, or low‑level hardware/software security experience.
• Experience validating models against system measurements or performing cybersecurity-focused system testing.
• Configuration management experience for complex electro-optical or high-power systems.
• Experience with Adaptive Optics (AO) systems.

Responsibilities

• Develop, manage, and trace cybersecurity requirements throughout the project lifecycle; align system security requirements with mission needs and Key Performance Parameters (KPPs).
• Apply MBSE techniques within Cameo to model cybersecurity‑focused architectures.
• Create and maintain an integrated security-driven system model linking requirements, interfaces, risks, test data, and behavioral representations.
• Represent cybersecurity considerations in cross-functional discussions with software, firmware, systems, and integration teams.
• Implement and test product-level network defenses.
• Develop secure procedures and support system sanitization, hardening, patch management planning, and secure configuration baselines.
• Support preparation and artifact generation for cyber assessment and authorization events (IATT, IATC), including security test procedures, evidence packages, and control verification outputs.
• Lead development of cybersecurity-related Interface Control Documents (ICDs); analyze and validate customer interface requirements.
• Produce technical documentation such as cybersecurity design descriptions, security control implementation details, and validation plans.
• Provide guidance on secure architecture best practices, MBSE usage, and cybersecurity design patterns.
• Participate in formal DoD acquisition reviews (SRR, PDR, CDR, IBR), focusing on cyber architecture, interfaces, and security posture.
• Continuously improve tools, workflows, and methodologies for MBSE and cybersecurity systems engineering.

Benefits

• 4 weeks of Paid Time Off per year
• 11 paid Holidays
• Employee Stock Purchase Plan
• Tuition Assistance Program
• Health (ACA Gold Plan), Vision and Dental Care paid by employer 100% for Employee and 75% for Dependents
• Paid Family Leave, Short and Long Term Disability paid by employer 100%
• Competitive 401k with company match and immediate vesting

What This Job Offers

• Job Type: Full-time
• Career Level: Senior