Staff Product Security Systems Engineer
Description
Location: Longmont, CO (onsite)
Experience: minimum 5+ years of experience in Systems Engineering
Minimum Education: Bachelors Degree in Systems Engineering, Electrical Engineering, Computer Science, or a related field.
Compensation: $120,000-$160,000 depending on experience.
Who We Are
nLIGHT-DEFENSE Systems, Inc. is one of the nation’s leading developers of Directed Energy systems, which is a top modernization priority of the Department of Defense. Our High Energy Laser (HEL) systems, Adaptive Optical (AO) systems, and Acquisition / Pointing / Tracking (APT) solutions are designed to overcome the most difficult challenges facing the deployment of high energy laser solutions to the United States military and our allies. Located in Longmont, Colorado, nLIGHT-DEFENSE Systems, Inc. is a vertically integrated business that leverages internal capabilities – from semiconductor device through target identification – to develop systems that are both high-performance and cost-effective. We continue to invest in capabilities, facilities and technology to bring leading edge HEL solutions to the warfighter. This is a great opportunity to work at a company that is on the leading edge of the HEL industry and provides a culture of excellence and commitment to delivering solutions to the warfighter and our country.
Headquartered in Camas, Washington, nLIGHT is a publicly listed company (NASDAQ: LASR).
Summary:
We are seeking a skilled and motivated Product Security Systems Engineer to join our team. The ideal candidate will be a broad systems thinker with strong analytical ability, hands-on cybersecurity engineering experience, and proficiency applying Model-Based Systems Engineering (MBSE) principles to develop cybersecurity‑focused system architectures.
This role centers on designing, implementing, and validating product-level cybersecurity protections for High Energy Laser (HEL) Weapon Systems and HEL Beam Control Systems (BCS). The candidate will own cybersecurity modeling in Cameo, produce system and network security artifacts, guide architecture decisions, and work closely with software, firmware, and systems engineering teams to ensure secure and coherent system development.
This engineer will also serve as a primary cybersecurity interface with customers, support product cybersecurity requirement interpretation and implementation, prepare systems for assessment activities (IATT/IATC), and help drive secure design choices for critical access points and mission interfaces.
All applicants must possess or be qualified to obtain a U.S. DoD Personnel Security Clearance. Preference will be given to candidates with an existing clearance. Information on the clearance process can be found at: https://www.dcsa.mil/mc/pv/mbi/gicp/.
Responsibilities:
- Develop, manage, and trace cybersecurity requirements throughout the project lifecycle; align system security requirements with mission needs and Key Performance Parameters (KPPs).
- Apply MBSE techniques within Cameo to model cybersecurity‑focused architectures.
- Create and maintain an integrated security-driven system model linking requirements, interfaces, risks, test data, and behavioral representations.
- Represent cybersecurity considerations in cross-functional discussions with software, firmware, systems, and integration teams.
- Implement and test product-level network defenses.
- Develop secure procedures and support system sanitization, hardening, patch management planning, and secure configuration baselines.
- Support preparation and artifact generation for cyber assessment and authorization events (IATT, IATC), including security test procedures, evidence packages, and control verification outputs.
- Lead development of cybersecurity-related Interface Control Documents (ICDs); analyze and validate customer interface requirements.
- Produce technical documentation such as cybersecurity design descriptions, security control implementation details, and validation plans.
- Provide guidance on secure architecture best practices, MBSE usage, and cybersecurity design patterns.
- Participate in formal DoD acquisition reviews (SRR, PDR, CDR, IBR), focusing on cyber architecture, interfaces, and security posture.
- Continuously improve tools, workflows, and methodologies for MBSE and cybersecurity systems engineering.
Required Experience / Capability
- Commitment to excellence. Attention to detail. Pride in workmanship.
- Ability to work in a dynamic, fast-paced environment and maintain strong working relationships under pressure.
- 5+ years experience in systems engineering or product cybersecurity engineering.
- Experience with MBSE tools such as Cameo Systems Modeler.
- Hands-on cybersecurity implementation experience (networking, secure protocols, access control, system hardening, configuration management practices).
- Ability to interface effectively with software and firmware development teams.
- Ability to manage long-range schedule objectives with minimal daily direction.
- Strong analytical and problem‑solving ability with experience absorbing information from diverse sources.
- Experience with MATLAB or software development languages (C, C++, C#, Java).
- Ability to generate and track Technical Performance Measures (TPMs) and cyber-relevant metrics.
- Good technical writing and documentation skills.
- Bachelor’s or Master’s degree in Systems Engineering, Cybersecurity, Electrical Engineering, Computer Science, or a related field.
Additional Desired Experience / Capability:
- Experience with electro-optical systems or HEL/HEL‑BCS systems.
- Knowledge of DoDAF, SysML security patterns, or architecture frameworks.
- Experience with RMF, NIST 800‑53 security controls, and similar cybersecurity assurance processes.
- Experience supporting IATT/IATC or other cybersecurity accreditation activities.
- Experience with secure software development practices, Agile workflows, or GitLab CI/CD.
- Experience defining and evaluating cybersecurity requirements for high-power laser or EO systems.
- Experience in command/data communication systems and secure interfaces.
- Firmware development, secure boot, or low‑level hardware/software security experience.
- Experience validating models against system measurements or performing cybersecurity-focused system testing.
- Configuration management experience for complex electro-optical or high-power systems.
- Experience with Adaptive Optics (AO) systems.
Benefits Summary:
- 4 weeks of Paid Time Off per year
- 11 paid Holidays
- Employee Stock Purchase Plan
- Tuition Assistance Program
- Health (ACA Gold Plan), Vision and Dental Care paid by employer 100% for Employee and 75% for Dependents
- Paid Family Leave, Short and Long Term Disability paid by employer 100%
- Competitive 401k with company match and immediate vesting
Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or age. For more information about our commitment to equal employment opportunity, please see this government poster: Know Your Rights: Workplace Discrimination is Illegal. If you are an individual with a disability and need a reasonable accommodation in the application or hiring process, please contact Human Resources at [email protected].