# Product Security Engineer [Chaosindustries](https://gurify.com/jobs?q=Chaosindustries) · El Segundo, United States · Posted yesterday [Security](https://gurify.com/jobs/security) [Apply on the original posting → (opens in a new tab)](https://job-boards.greenhouse.io/chaosindustries/jobs/5270684007) ## Job description CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats. CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London. For more information, please visit www.chaosinc.com. Role: We are seeking a Cybersecurity Engineer focused on Product Security to help design, assess, and secure our next-generation sensor platforms and supporting software ecosystems. This role will support the Senior Product Security Engineer and work closely with Engineering, Embedded Systems, Infrastructure, and Program teams to ensure security is integrated throughout the product lifecycle — from architecture and development through deployment and operational support. The ideal candidate has experience securing complex software and hardware systems within defense, aerospace, or other highly regulated environments. This individual will contribute to software security architecture efforts, assist with threat modeling and risk assessments, aid in compliance initiatives, and support the establishment of secure engineering standards across the organization. This is a highly collaborative and hands-on role with direct impact on the security and resiliency of mission-critical technologies deployed in operational environments. ### Responsibilities: ### System Security Engineering - Assist with the design and implementation of secure software and hardware system architectures for mission-critical platforms and supporting infrastructure - Partner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC) - Enable architecture reviews and identify security risks across software, embedded, real time, and hardware systems - Document secure design standards, engineering guidance, and product security best practices - Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation ### Threat Modeling & Risk Assessment - Execute threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure - Support cybersecurity risk assessments for products, systems, and operational environments - Map attack surfaces, identify trust boundaries, and harden potential exploitation paths - Work with engineering teams to prioritize and remediate identified security risks - Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies ### Compliance & Security Authorization - Contribute to cybersecurity compliance initiatives and product authorization efforts including: - RMF (Risk Management Framework) - ATO (Authority to Operate) - Development of system security documentation, security controls, SSPs, and assessment artifacts - Support internal and external security audits, assessments, and accreditation activities - Collaborate with government, customer, and program stakeholders on security requirements and authorization activities - Document security boundaries for both hardware and software ### Security Testing & Validation - Design security testing activities including vulnerability assessments, penetration testing coordination, and validation of remediation efforts - Support secure configuration and hardening efforts across software, operating systems, and embedded environments - Review software and system telemetry to identify potential security weaknesses or anomalous behavior - Collaborate with Security Operations and Infrastructure teams to improve product and enterprise security visibility ### Cross-Functional Collaboration - Work closely with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational requirements - Contribute to the development of scalable product security processes and governance - Support customer and internal security reviews related to deployed technologies and operational environments - Guide engineering teams on secure development and security-by-design principles ### Minimum Requirements: - 2+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles - Experience with software security design and/or secure system architecture principles - Hands-on experience supporting threat modeling and cybersecurity risk assessments - Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts - Familiarity with cybersecurity frameworks and compliance standards including: • - RMF - NIST 800-53 - NIST 800-171 - DFARS - Experience supporting security authorization activities such as ATO processes and security documentation development, and eMASS management - Experience securing embedded systems, sensor platforms, or edge computing technologies - Knowledge of cryptographic systems, key management systems, and key handling standards - Strong analytical, troubleshooting, and technical communication skills - Ability to operate effectively in a fast-paced startup environment - Must be a U.S. Citizen eligible to work in government facilities and handle sensitive information - Ability to obtain additional security clearances as required by contract ### Preferred Requirements: - Active Security Clearance - Experience supporting defense, aerospace, government contracting, or highly regulated technology environments - Firmware security or development experience - BIOS/UEFI security or development experience - Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge - Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent Why CHAOS? - Health Benefits: Medical, dental, and vision benefits 100% paid for by the company - Additional benefits: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more - Our Perks: Free daily lunch while you're working onsite, fully-stocked kitchen, unlimited PTO, casual dress code - Compensation Components: Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses - Team Growth: 500+ employees and counting across 5 global offices ### Salary Range: $101,000 - 170,000 The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. - Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated. • - #LI-onsite • **Live in Chaosindustries’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role. We remove it as soon as it disappears at source. ## More jobs like this - CH [Information Systems Security Engineer](https://gurify.com/job/information-systems-security-engineer-at-chaosindustries-06483d91a770) Chaosindustries · Los Angeles, United States · last week - AU [Data Security Engineer](https://gurify.com/job/data-security-engineer-at-audaxgroup-eae419783b57) Audaxgroup · Boston, MA · 2 weeks ago - TL [Cloud Security Engineer](https://gurify.com/job/cloud-security-engineer-at-trm-labs-5f4f1a42c02b) TRM Labs · United States · 3 weeks ago - WR [Staff security engineer, application security](https://gurify.com/job/staff-security-engineer-application-security-at-writer-738903a3af10) Writer · New York City, NY · 4 weeks ago - GI [Staff Software Engineer, Security Factory: Static Analysis](https://gurify.com/job/staff-software-engineer-security-factory-static-analysis-at-gitlab-ac8b810b4712) Gitlab · Remote, United States · 2 weeks ago - PA [Security Systems Engineer](https://gurify.com/job/security-systems-engineer-at-palantir-a6bef34fa982) Palantir · Seattle, WA · 4 weeks ago ```json {"@context":"https://schema.org/","@type":"JobPosting","title":"Product Security Engineer","description":"\u003Cp\u003ECHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage\u2014domain dominance. The company\u0026#39;s products are powered by Coherent Distributed Networks (CDN\u2122), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.\u003C/p\u003E\u003Cp\u003ECHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London. For more information, please visit www.chaosinc.com.\u003C/p\u003E\u003Cp\u003ERole:\u003Cbr /\u003EWe are seeking a Cybersecurity Engineer focused on Product Security to help design, assess, and secure our next-generation sensor platforms and supporting software ecosystems. This role will support the Senior Product Security Engineer and work closely with Engineering, Embedded Systems, Infrastructure, and Program teams to ensure security is integrated throughout the product lifecycle \u2014 from architecture and development through deployment and operational support.\u003C/p\u003E\u003Cp\u003EThe ideal candidate has experience securing complex software and hardware systems within defense, aerospace, or other highly regulated environments. This individual will contribute to software security architecture efforts, assist with threat modeling and risk assessments, aid in compliance initiatives, and support the establishment of secure engineering standards across the organization.\u003C/p\u003E\u003Cp\u003EThis is a highly collaborative and hands-on role with direct impact on the security and resiliency of mission-critical technologies deployed in operational environments.\u003C/p\u003E\u003Ch3\u003EResponsibilities:\u003C/h3\u003E\u003Ch3\u003ESystem Security Engineering\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EAssist with the design and implementation of secure software and\u202Fhardware\u202Fsystem architectures for mission-critical platforms and supporting infrastructure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEnable architecture reviews and identify security risks across software, embedded, real time, and hardware systems\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDocument secure design standards, engineering guidance, and product security best practices\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESupport secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EThreat Modeling \u0026amp; Risk Assessment\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EExecute threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESupport cybersecurity risk assessments for products, systems, and operational environments\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMap attack surfaces, identify trust boundaries, and harden potential exploitation paths\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWork with engineering teams to prioritize and remediate identified security risks\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDevelop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ECompliance \u0026amp; Security Authorization\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EContribute to cybersecurity compliance initiatives and product authorization efforts including:\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERMF (Risk Management Framework)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EATO (Authority to Operate)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDevelopment of system security documentation, security controls, SSPs, and assessment artifacts\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESupport internal and external security audits, assessments, and accreditation activities\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECollaborate with government, customer, and program stakeholders on security requirements and authorization activities\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDocument security boundaries for both hardware and software\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ESecurity Testing \u0026amp; Validation\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EDesign security testing activities including vulnerability assessments, penetration testing coordination, and validation of remediation efforts\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESupport secure configuration and hardening efforts across software, operating systems, and embedded environments\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EReview software and system telemetry to identify potential security weaknesses or anomalous behavior\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECollaborate with Security Operations and Infrastructure teams to improve product and enterprise security visibility\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ECross-Functional Collaboration\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EWork closely with Software, Embedded, Hardware, DevSecOps, and Infrastructure teams to balance security, performance, and operational requirements\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EContribute to the development of scalable product security processes and governance\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESupport customer and internal security reviews related to deployed technologies and operational environments\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EGuide engineering teams on secure development and security-by-design principles\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EMinimum Requirements:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003E2\u002B years of experience in cybersecurity engineering, product security, application security, or related engineering roles\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with software security design and/or secure system architecture principles\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on experience supporting threat modeling and cybersecurity risk assessments\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EKnowledge of secure software development lifecycle (SSDLC) practices and application security concepts\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with cybersecurity frameworks and compliance standards including:\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E\u2022\u003C/p\u003E\u003Cul\u003E\u003Cli\u003ERMF\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ENIST 800-53\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ENIST 800-171\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDFARS\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience supporting security authorization activities such as ATO processes and security documentation development, and eMASS\u202Fmanagement\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience securing embedded systems, sensor platforms, or edge computing technologies\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EKnowledge of cryptographic systems, key management systems, and key handling standards\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong analytical, troubleshooting, and technical communication skills\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAbility to operate effectively in a fast-paced startup environment\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMust be a U.S. Citizen eligible to work in government facilities and handle sensitive information\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAbility to obtain additional security clearances as required by contract\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EPreferred Requirements:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EActive Security Clearance\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience supporting defense, aerospace, government contracting, or highly regulated technology environments\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFirmware security or development experience\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBIOS/UEFI security or development experience\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETrusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESecurity certifications such as CISSP, CSSLP, GSEC, Security\u002B, or equivalent\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003EWhy CHAOS?\u003C/p\u003E\u003Cul\u003E\u003Cli\u003EHealth Benefits: Medical, dental, and vision benefits 100% paid for by the company\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAdditional benefits: 401k (\u002B 50% company match up to 6% of pay), FSA, HSA, life insurance, and more\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOur Perks: Free daily lunch while you\u0026#39;re working onsite, fully-stocked kitchen, unlimited PTO, casual dress code\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECompensation Components: Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETeam Growth: 500\u002B employees and counting across 5 global offices\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ESalary Range: $101,000 - 170,000\u003C/h3\u003E\u003Cp\u003EThe stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations.\u003C/p\u003E\u003Cul\u003E\u003Cli\u003ERecruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E\u2022\u003C/p\u003E\u003Cul\u003E\u003Cli\u003E#LI-onsite\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E\u2022\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"product-security-engineer-at-chaosindustries-b3ad93988901"},"url":"https://gurify.com/job/product-security-engineer-at-chaosindustries-b3ad93988901","datePosted":"2026-10-24","validThrough":"2026-12-09T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Chaosindustries","sameAs":"https://job-boards.greenhouse.io/chaosindustries"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"US","addressLocality":"El Segundo"}}} ``` ```json {"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"United States","item":"https://gurify.com/jobs/united-states"},{"@type":"ListItem","position":3,"name":"Product Security Engineer","item":"https://gurify.com/job/product-security-engineer-at-chaosindustries-b3ad93988901"}]} ```