{"id":69957,"url":"https://alion.io/job/overland-product-security-engineer","title":"Product Security Engineer","company":{"id":10605,"name":"Overland","domain":"overland.ai","url":"https://alion.io/company/overland","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"A","score":85,"open_postings":26,"ghost_share":0,"stale_share":0.615,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":170000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CI/CD","optional":false},{"name":"Machine Learning","optional":false},{"name":"NIST 800-53","optional":false},{"name":"SBOM","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-03-16T21:11:02Z","employer_posted_date":"2026-03-16","last_verified_at":"2026-10-16T15:34:58Z","board_verified":true,"closed_at":null,"days_open":213,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":213},"description":"About Overland AI\nFounded in 2022 and headquartered in Seattle, Washington, Overland AI is transforming land operations for modern defense. The company leverages over a decade of advanced research in robotics and machine learning, as well as a field-test forward ethos, to deliver combined capabilities for unit commanders. Our OverDrive autonomy stack enables ground vehicles to navigate and operate off-road in any terrain without GPS or direct operator control. Our intuitive OverWatch C2 interface provides commanders with precise coordination capabilities essential for mission success.\nOverland AI has secured funding from prominent defense tech investors including 8VC and Point 72, and built trusted partnerships with DARPA, the U.S. Army, Marine Corps, and Special Operations Command. Backed by eight-figure contracts across the Department of Defense, we are strengthening national security by iterating closely with end users engaged in tactical operations.\nRole Summary:\nWe are looking for a mission-driven Product Security Engineer to embed security into the entire lifecycle of our cutting-edge robotic systems and our command and control system. You will be responsible for hardening our autonomous ground vehicles against cyber threats in complex, contested environments. You will own compliance with our customer's contract requirements for cyber security.\nYou'll embed with engineering teams to drive threat modeling, define security requirements, prioritize risk, and verify that controls meet contractual and regulatory standards. You'll own our compliance posture (CSEIG v3.0, NIST 800-53/171, DISA STIGs) and prepare the evidence and documentation needed for customer authorization (ATO/ATC). You'll be the person who translates customer security requirements and industry standards into clear, prioritized work that engineering teams can act on.\nThis is a strategic and analytical role with technical depth. You need to understand how attacks work against embedded systems, networked robots, and C2 architectures, but your primary output is requirements, threat models, verification plans, and compliance artifacts, not production code.\nKey Responsibilities\nSecurity strategy & prioritization: Set and own the security roadmap. Assess the current posture, identify the highest-risk gaps, and sequence the work so the most important things get done first. You won't be able to fix everything at once - knowing what matters most is the job.\nThreat modeling & risk analysis: Lead threat modeling and attack-tree exercises across our robotic, autonomy, and C2 systems. Analyze operational concepts to identify security implications. Drive risk assessments that weigh mitigations against mission needs and resource constraints.\nSecurity requirements: Translate customer contracts, regulatory standards, and operational threat context into actionable security requirements for engineering teams. Define security acceptance criteria for features and releases. When an engineer asks why a control matters, explain the threat and the mission rationale.\nCompliance & authorization: Own the RMF and ATO/ATC lifecycle from control selection and tailoring through evidence generation and government stakeholder coordination. Map and implement controls aligned with CSEIG v3.0, DISA STIGs, and NIST 800-53/171. Prepare documentation and evidence packages. Manage POA&Ms. Track compliance gaps and drive closure with engineering. You are the company's ATO authority.\nSecure development lifecycle: Drive security across design, code review, CI/CD, and release. Establish security gates and review checklists. Participate in software release decisions as the security authority. Partner on supply-chain security, SBOM generation, and vulnerability management. \nVerification & validation: Define security test plans and acceptance criteria. Audit architectures and code for vulnerabilities. Drive remediation with engineering teams. Own the solutioning and verify the implementation, even where other teams do the building.\nCross-team partnership: Work directly with firmware, platform, autonomy, and C2 teams to ensure security is addressed at the architecture level. Strong enough technically to review architectures, evaluate cryptographic choices, assess OS hardening, and have credible design-level conversations with embedded and software engineers without needing to implement each one yourself.\nCustomer & standards interface: Serve as the primary point of contact for customer security requirements and compliance questions. Translate feedback from customers, industry standards bodies, and regulatory agencies into engineering action.\nQualifications\n5+ years in product security, cybersecurity engineering, or a closely related field, with demonstrated depth in both strategic program ownership and hands-on technical work.\nProven experience leading threat modeling and risk assessment for complex systems.\nProven experience owning an ATO end-to-end as the responsible authority, or deep hands-on experience across every phase of the RMF/ATO process with readiness to own it.\nPractical command of NIST 800-37, 800-53, and 800-171; DISA STIGs and SRGs; and eMASS artifact requirements, formats, and review cycles.\nAbility to evaluate, tailor, and defend STIG applicability with both customers and internal engineers, and translate control requirements into implementable guidance.\nPreferred Qualifications\nExperience securing embedded, autonomous, or operationally deployed systems, including air-gapped and disconnected environments.\nFamiliarity with CMMC, CSEIG v3.0, or FIPS 140-3 and cryptographic module validation.\nExperience with ISO/SAE 21434 or IEC 62443 and the judgment to apply commercial cybersecurity standards where DoD frameworks have gaps.\nActive CISSP or equivalent security certification.\nExperience supporting pre-sales, bids, or RFP responses as a security SME.\nExperience writing security requirements and tracing them through systems-engineering processes (requirements reviews, design reviews, V&V).\nStrong communication skills across audiences: engineering teams, executive leadership, and government stakeholders.\nComfortable with ambiguity: You've built or substantially shaped a security program before, or you're ready to. You don't need an established playbook to be effective.\nOffensive security skills: threat emulation, fuzzing, vulnerability research.\nBenefits:\nOverland AI believes in creating a work environment that you look forward to embracing every day.\nThe salary range for this position is $170K to $200K annually \nEquity compensation\nBest-in-class healthcare, dental and vision plans.\nUnlimited PTO\n401k with company match\nParental leave\nLocation:\nThis position will be located in Seattle, WA.\nOverland AI is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, age, marital status, disability, genetic information, protected veteran or military status, or any other status protected by applicable law.\nThis position may involve access to export-controlled technology. Employment is contingent on the ability to comply with U.S. export control laws.\nOverland AI provides reasonable accommodations for qualified individuals with disabilities and disabled veterans during the application process. Please contact []to request an accommodation.","description_format":"text","description_chars":7437,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Parental leave","Unlimited PTO"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Autonomous Driving","Military Robotics","Defense AI"],"lifecycle":[{"event":"open","at":"2026-03-16T21:11:02Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":77500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.245,"p_room":0.28,"age_days":213,"expected_fill_days":37,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/overland-product-security-engineer","json_url":"https://alion.io/job/overland-product-security-engineer.json","meta":{"generated_at":"2026-10-16T16:51:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1399,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":10605},"rest":"https://alion.io/mcp/rest/get_company?id=10605"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foverland-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foverland-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foverland-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/overland-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foverland-product-security-engineer"}]}