Back to jobs
New

Cybersecurity Engineer, Product Security

Hawthorne, California, United States

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats. 

CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, Seattle, and London. For more information, please visit www.chaosinc.com.

Role Overview:

We are seeking a Cybersecurity Engineer focused on Product Security to help design, assess, and secure our next-generation sensor platforms and supporting software ecosystems. This role will work closely with Software Engineering, Embedded Systems, Hardware Engineering, Infrastructure, and Program teams to ensure security is integrated throughout the product lifecycle — from architecture and development through deployment and operational support. 

The ideal candidate has experience securing complex software and hardware systems within defense, aerospace, or other highly regulated environments. This individual will lead software security architecture efforts, perform threat modeling and risk assessments, support compliance initiatives, and help establish secure engineering standards across the organization. 

This is a highly collaborative and hands-on role with direct impact on the security and resiliency of mission-critical technologies deployed in operational environments. 

Responsibilities:  

  • Product Security Engineering 
    • Design and implement secure software and hardware system architectures for mission-critical platforms and supporting infrastructure  
    • Partner with engineering teams to integrate security requirements throughout the software development lifecycle (SDLC)  
    • Conduct architecture reviews and identify security risks across software, embedded, cloud, and hardware systems  
    • Develop secure design standards, engineering guidance, and product security best practices  
    • Support secure development initiatives including code review, dependency management, secrets management, and vulnerability remediation  
  • Threat Modeling & Risk Assessment 
    • Lead threat modeling exercises for software, embedded systems, hardware platforms, and supporting infrastructure  
    • Conduct cybersecurity risk assessments for products, systems, and operational environments  
    • Identify attack surfaces, trust boundaries, and potential exploitation paths  
    • Work with engineering teams to prioritize and remediate identified security risks  
    • Develop mitigation strategies for cybersecurity threats impacting deployed systems and sensitive technologies  
  • Compliance & Security Authorization 
    • Support cybersecurity compliance initiatives and product authorization efforts including:  
    • RMF (Risk Management Framework)  
    • ATO (Authority to Operate)  
    • Export control and regulated data handling requirements  
    • Assist with development of system security documentation, security controls, SSPs, and assessment artifacts  
    • Support internal and external security audits, assessments, and accreditation activities  
    • Collaborate with government, customer, and program stakeholders on security requirements and authorization activities  
  • Security Testing & Validation 
    • Assist with security testing activities including vulnerability assessments, penetration testing coordination, and validation of remediation efforts  
    • Support secure configuration and hardening efforts across software, operating systems, and embedded environments  
    • Review software and system telemetry to identify potential security weaknesses or anomalous behavior  
    • Collaborate with Security Operations and Infrastructure teams to improve enterprise and product security visibility  
  • Cross-Functional Collaboration 
    • Work closely with Software, Embedded, Hardware, DevOps, and Infrastructure teams to balance security, performance, and operational requirements  
    • Contribute to the development of scalable product security processes and governance  
    • Support customer and internal security reviews related to deployed technologies and operational environments  
    • Mentor engineering teams on secure development and security-by-design principles  

 Minimum Requirements: 

  • 5+ years of experience in cybersecurity engineering, product security, application security, or related engineering roles  
  • Experience with software security design and secure system architecture principles  
  • Hands-on experience conducting threat modeling and cybersecurity risk assessments  
  • Knowledge of secure software development lifecycle (SSDLC) practices and application security concepts  
  • Familiarity with cybersecurity frameworks and compliance standards including:  
  • RMF  
  • NIST 800-53  
  • NIST 800-171  
  • CMMC  
  • DFARS  
  • Experience supporting security authorization activities such as ATO processes and security documentation development, and eMASS 
  • Understanding of cloud, endpoint, network, and identity security concepts  
  • Strong analytical, troubleshooting, and technical communication skills  
  • Ability to operate effectively in a fast-paced startup environment  
  • Must be a U.S. Citizen eligible for government facilities and sensitive information
  • Ability to obtain additional security clearances as required by contract

Preferred Requirements: 

  • Active Security Clearance
  • Experience supporting defense, aerospace, government contracting, or regulated technology environments  
  • Experience securing embedded systems, sensor platforms, or edge computing technologies  
  • Familiarity with export control requirements including ITAR and EAR  
  • Experience with secure DevSecOps pipelines and automation practices  
  • Experience with Microsoft GCC High environments and regulated cloud architectures  
  • Firmware development experience  
  • BIOS/UEFI security or development experience  
  • Hardware security design experience  
  • Trusted Platform Module (TPM), secure boot, cryptographic hardware, or supply chain security knowledge  
  • Experience with scripting or automation using Python, PowerShell, or Bash  
  • Security certifications such as CISSP, CSSLP, GSEC, Security+, or equivalent  

Why CHAOS?

  • Health Benefits: Medical, dental, and vision benefits 100% paid for by the company
  • Additional benefits: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more
  • Our Perks: Free daily lunch, ‘No meeting Fridays’, unlimited PTO, casual dress code
  • Compensation Components: Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses
  • Team Growth: 250 employees and counting across 5 global offices
Salary Range: $110,000 - $190,000

The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. 

 

Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.

 

#LI-onsite

Create a Job Alert

Interested in building your career at CHAOS Industries? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...
Select...

Please note this position does not necessarily require eligibility to obtain and maintain a U.S. security clearance. 

Select...

EXPORT CONTROLS - This position may require access to information and technology that is subject to U.S. export controls. Your responses to the questions below will be used solely to determine your eligibility under U.S. law to receive information and materials subject to U.S. export controls.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in CHAOS Industries’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.