Senior Product Security Engineer - Avionics Development
Berkeley or Saint Charles or Herndon or Hazelwood or Arlington or Saint Louis
$162k-$235k/yrOnsiteFull Time
BoeingNYSE: BA: Designing and manufacturing commercial aircraft and defense systems.
9+ YOEDevelop and sustain product cybersecurity for avionics across lifecycle; derive security requirements; perform risk, threat and criticality analysis; 9+ years experience and bachelor’s in engineering or related field required.
Bespoke Technologies: Provides technical engineering and data solutions for national security.
Expert-level cybersecurity engineer with active poly clearance and cloud security assessment experience across AWS, Oracle Cloud, Google Cloud, or Azure; requires RMF, A&A, compliance, project management, and reporting expertise.
Amazon Web Services, Oracle Cloud, Google Cloud, Microsoft Azure, Rapid7, Nessus, Qualys, Xacta 360, Risk Vision, RSA Archer, NIST Risk Management Framework
Two Six Technologies: Develops cybersecurity and data systems for national security missions.
Experience in embedded systems, firmware reverse engineering, C/C++ and Python development, familiarity with Ghidra/IDA/Binary Ninja and QEMU, active Top Secret clearance and ability to obtain TS/SCI, ability to work onsite in Herndon, VA.
Forterra: Develops autonomous ground vehicle systems and software for defense.
5+ YOEHands-on RMF/ATO experience, 5+ years security engineering, knowledge of NIST/STIGs/eMASS, hardware and software security, secure-SDLC and SBOMs, US Person and eligible for security clearance.
Austin or Nashville or Seattle or Arlington or Herndon or Houston or Dallas
$178k-$227k/yrOnsiteFull Time
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years identifying security risks and developing mitigations; 4+ years scripting/programming; expertise in cloud security, secure coding, IaC, and security automation.
Ardent Principles: Provides specialized technology and program management services to government agencies.
Cybersecurity and penetration testing experience; Linux, Windows, virtual platforms, network security, risk mitigation, and security architecture experience. Active TS/SCI with full scope polygraph required.
Linux, Windows, Google Cloud Computing Services, Oracle Cloud Computing Services
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
Deep hands-on offensive security/red team experience executing complex engagements, manual exploitation and attack chaining, identity and cloud abuse, custom scripting/tooling, and strong communication with engineering and response teams.
Freedom Technology Solutions Group: Provides geospatial and software engineering solutions for national security agencies.
Cybersecurity or IT experience, penetration testing, ethical hacking, system exploitation, network security analysis, security architecture, risk mitigation, and enterprise Windows and hypervisor testing.
GRVTY: Develops defense technology, cyber, and intelligence software solutions.
Requires active TS/SCI with polygraph, cybersecurity and penetration testing experience, network and security architecture analysis, risk mitigation, and Windows, Linux, and virtual platform expertise.
Basking Ridge or Alpharetta or Irving or Ashburn or Temple Terrace or Cary
$121k-$231k/yrHybridFull Time
VerizonNYSE: VZ: Provides wireless, broadband, and telecommunications services to customers.
6+ YOE6+ years network security experience, expertise in routing/switching and BGP/IGP security, SIEM/Splunk, automation with Python/Ansible/Terraform, and leadership in cross-functional projects.
AeroVironmentNASDAQ: AVAV: Designs and manufactures unmanned aircraft and tactical missile systems.
5+ YOEBachelor's degree in engineering or related field; 5+ years in systems engineering for defense/aerospace; experience with requirements management, end-to-end development, and cross-functional collaboration; DoD security clearance desired but not required; US citizenship required.
Exostar: Cloud platforms for secure collaboration in regulated industries.
5+ YOE5+ years securing cloud architectures and implementing technical controls across cloud, identity, PKI, and application environments; experience with audits (SOC 2, ISO 27001), DevSecOps, and working with engineering teams.
Jira, Confluence, Active Directory, Entra ID/Azure AD, SAML, OIDC, MFA, PKI, TLS, VPN/IPSec, Java, APIs, OWASP SAMM, Microsoft Security Development Lifecycle, IBM Secure Engineering Framework, SOC 2, ISO/IEC 27001, CMMC, DLP, HIPS, HIDS
Basking Ridge or Alpharetta or Ashburn or Irving or Cary or Temple Terrace
$121k-$231k/yrHybridFull Time
VerizonNYSE: VZ: Provides wireless, fiber-optic internet, and telecommunications services globally.
6+ YOE6+ years relevant experience, bachelor’s degree or equivalent experience, leadership experience, deep routing/switching and network security expertise, hands-on with Python/Ansible/Terraform, Splunk/SIEM, and network telemetry analysis.
Python, Ansible, Terraform, Splunk, Confluence, SIEM, API
LTS: An enterprise consulting and IT modernization firm delivering healthcare IT solutions for federal agencies and public organizations.
5+ YOEBachelor's degree, ability to obtain Public Trust, 5+ years cybersecurity engineering experience in federal or regulated/cloud environments, AWS security, RMF/ATO, eMASS/ServiceNow GRC, NIST/FedRAMP/DISA STIGs, and DevSecOps/CI/CD familiarity.
ManTech: Provides technology solutions for defense and intelligence agencies.
7+ YOERequires 7+ years of cloud security or cyber operations experience, 5+ years with AWS, 3+ years coding in Python, active TS/SCI with polygraph, and expertise in security monitoring and incident response.
BAE SystemsLondon Stock Exchange: BA.: Produces advanced defense, aerospace, and information security systems.
11+ YOERequires 11+ years of experience and a bachelor's degree, with expertise in ISSE, RMF, ICD 503, A&A documentation, security controls, SSPs, CONOPS, and government accreditation processes.
Xacta, RoadRunner, Rapid7, WebInspect, AppDetective, Splunk, AWS, Microsoft Azure, VMware, Microsoft Excel, Microsoft Office 365, PKI, STIG, SecDevOps
GrammaTech: A software technology developing tools for embedded systems, reverse engineering, and cybersecurity.
Requires low-level C/C++ development, Python scripting in Linux, firmware reverse engineering, control-flow analysis, and embedded binary rehosting with QEMU. Top Secret/SCI clearance required for Herndon; polygraph required in Maryland.
C, C++, Python, Linux, Ghidra, IDA Pro, Binary Ninja, QEMU, Ghidra API, Binary Ninja API, JTAG, SWD, Software Defined Radio (SDR), Real-Time Operating Systems (RTOS)