Senior DoD Product Security Engineer

Forterra
United States
Workplace: OnsiteFull timeUSD 145,000 - 175,000 annuallyFunction: CybersecurityEducation: bachelorsSkills: ["Stakeholder communication","Risk assessment","Requirements writing","Driving security uplift","Working with ambiguity"]

Own DoD product security for end-to-end RMF and ATO across program(s), acting as the security SME for both engineers and a government cyber/program office. Define and trace security architecture and requirements, lead threat modeling and risk assessments, and manage POA&M execution. Serve as STIG subject-matter expert, translate controls into implementable guidance, and verify security monitoring, logging, signed update strategies, vulnerability management, and secure SDLC practices.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Forterra
Forterra
1 month ago

Senior DoD Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Own DoD product security for end-to-end RMF and ATO across program(s), acting as the security SME for both engineers and a government cyber/program office. Define and trace security architecture and requirements, lead threat modeling and risk assessments, and manage POA&M execution. Serve as STIG subject-matter expert, translate controls into implementable guidance, and verify security monitoring, logging, signed update strategies, vulnerability management, and secure SDLC practices.
Location: United States
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own RMF and ATO lifecycle end-to-end, selecting and tailoring controls and driving implementation with engineering while managing POA&Ms.
  • •Set and own the security architecture and direction for the program by defining controls, proposing solutions, and writing requirements that engineers build to.
  • •Lead threat modeling across autonomy, embedded, and command-and-control systems and perform risk assessments that balance mitigations with mission needs.
  • •Serve as the STIG subject-matter expert—communicate STIG requirements, recommend implementation/mitigation approaches, and evaluate/tailor/defend applicability.
  • •Own solutioning and verification for security monitoring, logging, detection, signed secure update strategies, and vulnerability and CVE management, including security supply-chain work (SBOMs).

Pay and Benefits

Salary: USD 145,000 - 175,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceLife InsuranceDisability InsurancePaid Leave401k

Key Requirements

  • •5+ years in security engineering (or equivalent) to serve as the program’s security decision-maker for end-to-end RMF/ATO.
  • •Hands-on RMF/ATO experience, including knowledge of each step of the ATO process to act as the sole SME internally and with a government cyber/program office.
  • •Practical command of NIST 800-37, 800-53, and 800-171, DISA STIGs, and familiarity with eMASS artifact requirements and review cycles.
  • •Ability to evaluate, tailor, and defend STIG applicability and translate STIG/control requirements into clear implementation guidance for engineers.
  • •Depth in both hardware and software security, including identifying and mitigating high-impact vulnerabilities and writing security requirements that communicate both rationale and approach.
Experience:DoDCybersecurityRMF/ATOEmbedded systems
Education:Bachelor's in Computer Science, Computer Engineering, Information Security, Electrical Engineering, or a related field
Skills:Stakeholder communicationRisk assessmentRequirements writingDriving security upliftWorking with ambiguity
Certifications:CISSP
Tech Stack:RMFATONIST 800-37NIST 800-53NIST 800-171DISA STIGEMASSSTIGCI/CDDevSecOpsSASTDASTCode reviewSBOMCVESecure SDLCFIPS 140-3TPMHSMSecure boot

Eligibility

Security Clearance:U.S. security clearance

Company Brief

Forterra
Designs, manufactures and supplies heavy building materials and infrastructure products for construction and water management projects, serving contractors and municipalities with precast, pipe, and masonry solutions across regional markets.
Industry: Building Materials
Website