SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 135,000 - 200,000 / annual
CHAOS Industries is seeking a Senior Cybersecurity Engineer focused on Product Security to design, assess, and secure next-generation sensor platforms and supporting software ecosystems. This role collaborates across Software Engineering, Embedded Systems, Hardware Engineering, Infrastructure, and Program teams to integrate security throughout the product lifecycle—from architecture and development through deployment and operational support.
The ideal candidate has experience securing complex software and hardware systems within defense, aerospace, or other highly regulated environments. This is a highly collaborative, hands-on role with direct impact on the security and resiliency of mission-critical technologies deployed in operational environments.
Key Responsibilities:
Product Security Engineering: Design and implement secure software and hardware system architectures for mission-critical platforms and supporting infrastructure. Partner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC). Conduct architecture reviews and identify security risks across software, embedded, cloud, and hardware systems. Develop secure design standards, engineering guidance, and product security best practices. Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation.
Threat Modeling & Risk Assessment: Lead threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure. Conduct cybersecurity risk assessments for products, systems, and operational environments. Identify attack surfaces, trust boundaries, and potential exploitation paths. Work with engineering teams to prioritize and remediate identified security risks. Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies.
Compliance & Security Authorization: Support cybersecurity compliance initiatives and product authorization efforts including Risk Management Framework (RMF), Authority to Operate (ATO), export control and regulated data handling requirements. Assist with development of system security documentation, security controls, System Security Plans (SSPs), and assessment artifacts. Support internal and external security audits, assessments, and accreditation activities.
About CHAOS Industries: Founded in 2022, CHAOS Industries has raised $1 billion in funding from leading investors including 8VC, Accel, and Valor Equity Partners. The company redefines modern defense with a multi-product portfolio powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams. Headquartered in Los Angeles with offices in Washington D.C., San Francisco, San Diego, and London, the company employs 500+ employees across 5 global offices.
Requirements:
Must-Have:
- 8+ years of experience in cybersecurity, with at least 5 years focused on product security or secure software development
- Demonstrated expertise in secure software architecture and design patterns
- Strong understanding of threat modeling methodologies (STRIDE, attack trees, or equivalent)
- Experience with cybersecurity risk assessment frameworks and methodologies
- Knowledge of secure coding practices and common vulnerability types (OWASP Top 10, CWE)
- Familiarity with compliance frameworks such as NIST Cybersecurity Framework, NIST SP 800-53, or DoD security standards
- Experience in defense, aerospace, or other highly regulated industries
- Excellent communication skills and ability to work cross-functionally with engineering, product, and program teams
Nice-to-Have:
- Experience with embedded systems security or IoT security
- Knowledge of cloud security (AWS, Azure, GCP)
- BIOS/UEFI security or development experience
- Hardware security design experience
- Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge
- Experience with scripting or automation using Python, PowerShell, or Bash
- Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent
