To Apply for this Job Click Here

Information Security Engineer (Embedded / Product Security)

Role Overview

Seeking a hands-on Information Security Engineer to own security reviews, risk management, and incident response across embedded, product, and infrastructure environments. This role blends security engineering, risk & compliance oversight, and program ownership, supporting production systems in a hardware-adjacent, fast-moving environment.

The ideal candidate is comfortable operating independently, driving security initiatives end-to-end, and partnering closely with engineering teams to ensure systems are secure, compliant, and production ready.

Must-Have Qualifications

5+ years of experience in Security Engineering, Product Security, or DevSecOpsProven experience conducting security reviews, risk assessments, and vulnerability managementHands-on incident response experience, including investigation and remediationStrong experience securing Linux-based systems, applications, and networksExposure to embedded, IoT, hardware-adjacent, or cyber-physical systemsProficiency with Python and Bash for security automationExperience integrating security into CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins)Familiarity with security and compliance frameworks (NIST 800-53/171, ISO 27001, FedRAMP, or similar)Experience working with security tools such as endpoint protection, IDS/IPS, firewalls, or vulnerability scannersAbility to operate independently, manage multiple priorities, and own initiatives end-to-endStrong communication and documentation skills

Nice-to-Have

Experience securing embedded ARM platforms, Jetson, or firmwareBackground in defense, robotics, or hardware-centric environmentsKnowledge of anti-tamper techniques or reverse-engineering toolsExperience with infrastructure-as-code (Terraform, CloudFormation)Familiarity with FPGAs or embedded toolchainsSecurity certifications (CISSP, CISM, Security+)

Core Responsibilities

Own and execute security reviews, risk assessments, and vulnerability scans across applications, infrastructure, and embedded systemsDevelop, implement, and maintain information security policies, standards, and controlsMonitor systems and investigate security events; lead incident response, remediation, and post-incident reviewsCoordinate compliance activities and audits aligned with frameworks such as NIST, ISO 27001, FedRAMP, or similarPartner with engineering teams to harden systems and embed security into development and deployment workflowsAutomate security checks, scans, and guardrails using Python and BashProvide clear status reporting, risk summaries, and incident documentation to stakeholders

Interested candidates may submit their resumes online or call at 310-906-4780 for further information regarding the position

NS-ISECD-NS_1770240678 To Apply for this Job Click Here