Cybersecurity Engineer, Product Security

requirements Assist with development of system security documentation, security controls, SSPs, and assessment artifacts Support internal and external security audits, assessments, and accreditation activities Collaborate with government, customer, and program stakeholders on security

requirements and authorization activities Security Testing & Validation Assist with security testing activities including vulnerability assessments, penetration testing coordination, and validation of remediation efforts Support secure configuration and hardening efforts across software, operating systems, and embedded environments Review software and system telemetry to identify potential security weaknesses or anomalous behavior Collaborate with Security Operations and Infrastructure teams to improve enterprise and product security visibility Cross-Functional Collaboration Work closely with Software, Embedded, Hardware, DevOps, and Infrastructure teams to balance security, performance, and operational

requirements Contribute to the development of scalable product security processes and governance Support customer and internal security reviews related to deployed technologies and operational environments Mentor engineering teams on secure development and security-by-design principles Minimum

Requirements: 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles Experience with software security design and secure system architecture principles Hands-on experience conducting threat modeling and cybersecurity risk assessments Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts Familiarity with cybersecurity frameworks and compliance standards including: RMF NIST 800-53 NIST 800-171 CMMC DFARS Experience supporting security authorization activities such as ATO processes and security documentation development, and eMASS Understanding of cloud, endpoint, network, and identity security concepts Strong analytical, troubleshooting, and technical communication skills Ability to operate effectively in a fast-paced startup environment Must be a U.S. Citizen eligible for government facilities and sensitive information Ability to obtain additional security clearances as required by contract Preferred

Requirements: Active Security Clearance Experience supporting defense, aerospace, government contracting, or regulated technology environments Experience securing embedded systems, sensor platforms, or edge computing technologies Familiarity with export control

requirements including ITAR and EAR Experience with secure DevSecOps pipelines and automation practices Experience with Microsoft GCC High environments and regulated cloud architectures Firmware development experience BIOS/UEFI security or development experience Hardware security design experience Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge Experience with scripting or automation using Python, PowerShell, or Bash Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent Why CHAOS? Health

Benefits: Medical, dental, and vision

benefits 100% paid for by the company Additional

benefits : 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more Our

Perks: Free daily lunch, ‘No meeting Fridays’, unlimited PTO, casual dress code

Compensation Components: Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses Team Growth: 250 employees and counting across 5 global offices Salary Range: $110,000 - $190,000 The stated

compensation range reflects only the targeted base

compensation range and excludes additional earnings such as

bonus, equity, and

benefits. If your

compensation

requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of

compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated. #LI-onsite

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.