Forterra

6 days ago

Senior DoD Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Own DoD product security for end-to-end RMF and ATO across program(s), acting as the security SME for both engineers and a government cyber/program office. Define and trace security architecture and requirements, lead threat modeling and risk assessments, and manage POA&M execution. Serve as STIG subject-matter expert, translate controls into implementable guidance, and verify security monitoring, logging, signed update strategies, vulnerability management, and secure SDLC practices.

Location: United States

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own RMF and ATO lifecycle end-to-end, selecting and tailoring controls and driving implementation with engineering while managing POA&Ms.
•Set and own the security architecture and direction for the program by defining controls, proposing solutions, and writing requirements that engineers build to.
•Lead threat modeling across autonomy, embedded, and command-and-control systems and perform risk assessments that balance mitigations with mission needs.
•Serve as the STIG subject-matter expert—communicate STIG requirements, recommend implementation/mitigation approaches, and evaluate/tailor/defend applicability.
•Own solutioning and verification for security monitoring, logging, detection, signed secure update strategies, and vulnerability and CVE management, including security supply-chain work (SBOMs).

Pay and Benefits

Salary: USD 145,000 - 175,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceLife InsuranceDisability InsurancePaid Leave401k

Key Requirements

•5+ years in security engineering (or equivalent) to serve as the program’s security decision-maker for end-to-end RMF/ATO.
•Hands-on RMF/ATO experience, including knowledge of each step of the ATO process to act as the sole SME internally and with a government cyber/program office.
•Practical command of NIST 800-37, 800-53, and 800-171, DISA STIGs, and familiarity with eMASS artifact requirements and review cycles.
•Ability to evaluate, tailor, and defend STIG applicability and translate STIG/control requirements into clear implementation guidance for engineers.
•Depth in both hardware and software security, including identifying and mitigating high-impact vulnerabilities and writing security requirements that communicate both rationale and approach.

Experience:DoDCybersecurityRMF/ATOEmbedded systems

Education:Bachelor's in Computer Science, Computer Engineering, Information Security, Electrical Engineering, or a related field

Skills:Stakeholder communicationRisk assessmentRequirements writingDriving security upliftWorking with ambiguity

Certifications:CISSP

Tech Stack:RMFATONIST 800-37NIST 800-53NIST 800-171DISA STIGEMASSSTIGCI/CDDevSecOpsSASTDASTCode reviewSBOMCVESecure SDLCFIPS 140-3TPMHSMSecure boot

Eligibility

Security Clearance:U.S. security clearance

Company Brief

Forterra

Designs, manufactures and supplies heavy building materials and infrastructure products for construction and water management projects, serving contractors and municipalities with precast, pipe, and masonry solutions across regional markets.

Industry: Building Materials

Website

Loading job details...

Preparing the role view and application actions.

Forterra

6 days ago

Senior DoD Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own RMF and ATO lifecycle end-to-end, selecting and tailoring controls and driving implementation with engineering while managing POA&Ms.
•Set and own the security architecture and direction for the program by defining controls, proposing solutions, and writing requirements that engineers build to.
•Lead threat modeling across autonomy, embedded, and command-and-control systems and perform risk assessments that balance mitigations with mission needs.
•Serve as the STIG subject-matter expert—communicate STIG requirements, recommend implementation/mitigation approaches, and evaluate/tailor/defend applicability.
•Own solutioning and verification for security monitoring, logging, detection, signed secure update strategies, and vulnerability and CVE management, including security supply-chain work (SBOMs).

Pay and Benefits

Salary: USD 145,000 - 175,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceLife InsuranceDisability InsurancePaid Leave401k

Key Requirements

•5+ years in security engineering (or equivalent) to serve as the program’s security decision-maker for end-to-end RMF/ATO.
•Hands-on RMF/ATO experience, including knowledge of each step of the ATO process to act as the sole SME internally and with a government cyber/program office.
•Practical command of NIST 800-37, 800-53, and 800-171, DISA STIGs, and familiarity with eMASS artifact requirements and review cycles.
•Ability to evaluate, tailor, and defend STIG applicability and translate STIG/control requirements into clear implementation guidance for engineers.
•Depth in both hardware and software security, including identifying and mitigating high-impact vulnerabilities and writing security requirements that communicate both rationale and approach.

Experience:DoDCybersecurityRMF/ATOEmbedded systems

Education:Bachelor's in Computer Science, Computer Engineering, Information Security, Electrical Engineering, or a related field

Skills:Stakeholder communicationRisk assessmentRequirements writingDriving security upliftWorking with ambiguity

Certifications:CISSP

Tech Stack:RMFATONIST 800-37NIST 800-53NIST 800-171DISA STIGEMASSSTIGCI/CDDevSecOpsSASTDASTCode reviewSBOMCVESecure SDLCFIPS 140-3TPMHSMSecure boot

Eligibility

Security Clearance:U.S. security clearance

Company Brief

Forterra

Industry: Building Materials

Website