Product Security Engineer

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.

CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London. For more information, please visit www.chaosinc.com.

Role:We are seeking a Cybersecurity Engineer focused on Product Security to help design, assess, and secure our next-generation sensor platforms and supporting software ecosystems. This role will support the Senior Product Security Engineer and work closely with Engineering, Embedded Systems, Infrastructure, and Program teams to ensure security is integrated throughout the product lifecycle — from architecture and development through deployment and operational support.

The ideal candidate has experience securing complex software and hardware systems within defense, aerospace, or other highly regulated environments. This individual will contribute to software security architecture efforts, assist with threat modeling and risk assessments, aid in compliance initiatives, and support the establishment of secure engineering standards across the organization.

This is a highly collaborative and hands-on role with direct impact on the security and resiliency of mission-critical technologies deployed in operational environments.

Responsibilities:  

System Security Engineering

Assist with the design and implementation of secure software and hardware system architectures for mission-critical platforms and supporting infrastructure

Partner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC)

Enable architecture reviews and identify security risks across software, embedded, real time, and hardware systems

Document secure design standards, engineering guidance, and product security best practices

Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation

Threat Modeling & Risk Assessment

Execute threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure

Support cybersecurity risk assessments for products, systems, and operational environments

Map attack surfaces, identify trust boundaries, and harden potential exploitation paths

Work with engineering teams to prioritize and remediate identified security risks

Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies

Compliance & Security Authorization

Contribute to cybersecurity compliance initiatives and product authorization efforts including:

RMF (Risk Management Framework)

ATO (Authority to Operate)

Development of system security documentation, security controls, SSPs, and assessment artifacts

Support internal and external security audits, assessments, and accreditation activities

Collaborate with government, customer, and program stakeholders on security requirements and authorization activities

Document security boundaries for both hardware and software

Security Testing & Validation

Design security testing activities including vulnerability assessments, penetration testing coordination, and validation of remediation efforts

Support secure configuration and hardening efforts across software, operating systems, and embedded environments

Review software and system telemetry to identify potential security weaknesses or anomalous behavior

Collaborate with Security Operations and Infrastructure teams to improve product and enterprise security visibility

Cross-Functional Collaboration

Work closely with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational requirements

Contribute to the development of scalable product security processes and governance

Support customer and internal security reviews related to deployed technologies and operational environments

Guide engineering teams on secure development and security-by-design principles

 Minimum Requirements:

2+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles

Experience with software security design and/or secure system architecture principles

Hands-on experience supporting threat modeling and cybersecurity risk assessments

Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts

Familiarity with cybersecurity frameworks and compliance standards including:

RMF

NIST 800-53

NIST 800-171

DFARS

Experience supporting security authorization activities such as ATO processes and security documentation development, and eMASS management

Experience securing embedded systems, sensor platforms, or edge computing technologies

Knowledge of cryptographic systems, key management systems, and key handling standards

Strong analytical, troubleshooting, and technical communication skills

Ability to operate effectively in a fast-paced startup environment

Must be a U.S. Citizen eligible to work in government facilities and handle sensitive information

Ability to obtain additional security clearances as required by contract

Preferred Requirements:

Active Security Clearance

Experience supporting defense, aerospace, government contracting, or highly regulated technology environments

Firmware security or development experience

BIOS/UEFI security or development experience

Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge

Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent

Why CHAOS?

Health Benefits: Medical, dental, and vision benefits 100% paid for by the company

Additional benefits: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more

Our Perks: Free daily lunch while you're working onsite, fully-stocked kitchen, unlimited PTO, casual dress code

Compensation Components: Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses

Team Growth: 500+ employees and counting across 5 global offices

Salary Range: $101,000 - 170,000

The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations.

Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.

#LI-onsite