Product Security Engineer Jobs in Alabama
Product Security Engineer jobs in Alabama are active and growing, concentrated in aerospace and defense, government contracting, and financial technology sectors, with openings at every level from associate to principal engineer. Huntsville, Birmingham, and Tuscaloosa are the largest hiring metros, home to established employers like Northrop Grumman, SAIC, and Regions Financial that maintain sustained product security teams. The most in-demand specialties include secure SDLC implementation, embedded systems security, and cloud-native threat modeling. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 66+ Product Security Engineer jobs
Cyber Security Engineer, Mid/Senior
Overview
SimTech, Inc., recognized as one of the 2026 Best Places for Working Parents, is seeking a Cyber Security Engineer, Mid/Senior to join our dynamic and diverse team in Huntsville, AL. This is an upcoming opening with opportunities for growth and professional development.
SimTech offers a market leading compensation package with excellent benefits, work/life balance, outstanding retirement plan, career advancement and much more.
The Cyber Security Engineer, Mid/Senior is responsible for ensuring software applications, systems, and networks comply with Department of Defense cybersecurity and risk management requirements. This role conducts security assessments, vulnerability analysis, compliance audits, and continuous monitoring to evaluate and strengthen system security.
Responsibilities
Utilizing best practices and methods for monitoring, auditing, and measuring risk, compliance, and assurance efforts.
Ensuring risk, compliance, and assurance efforts conform to Department of War (DoW) security, resilience, and dependability requirements at the software application, system, and network levels.
Documenting preliminary or residual security risks for system operation.
Verifying that the software application/network/system authorization and assurance documentation is current.
Monitoring and evaluating a system's compliance with DoW security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results and analyzing the differences to identify impact and risks.
Provide an accurate technical evaluation of the software application, system, or network, documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls.
Recommending new or revised security measures and countermeasures based on risk analysis then verifying that security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
Responsible for the operation of DOW tools, security monitoring and auditing solution utilizing a COTS product i.e. (Elastic Endpoint Security Solutions (ESS), etc.) and industry wide best practices.
Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in the security plan.
Conduct annual inspections to validate system updates, configuration compliance utilizing technical scans, and physical observations at domestic and foreign sites (~10% travel).
Data collection, documentation and reporting on all the above responsibilities as required. Perform other duties as assigned to realize mission success.
Support Stakeholders in the operation of the comprehensive Elastic platform in terms of know-how and the technologies used.
Performs other duties as assigned.
Minimum Qualifications & Education Requirements and Desired Skillsets
Experience Requirements
Bachelor's degree in Computer Science or a related field, or equivalent experience (experience may be substituted for a degree).
Mid and Senior-Level candidates considered (5-20 years).
5+ years of cybersecurity experience, preferably supporting Department of Defense (DoD) environments.
5+ years of experience administering and securing Red Hat Enterprise Linux (RHEL) operating systems.
5+ years of experience with DoD cybersecurity tools and processes, including eMASS, STIGs, IAVAs, ACAS/Nessus, SCAP, and RMF documentation.
5+ years of experience conducting vulnerability assessments, system audits, POA&M management, and RMF package development.
5+ years of experience working with cybersecurity frameworks and standards such as NIST and NISPOM.
Minimum Qualifications
Meet DoD 8570 Information Assurance Technical (IAT) Level III or Information Assurance Management (IAM) Level III certification requirements upon employment (e.g., CISSP or CISM).
Experience with Red Hat Enterprise Linux (RHEL) operating systems.
Working knowledge of DoD security policies and procedures.
Understanding of Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIGs), IAVAs, Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP), and Evaluate-STIG Validation Tool.
Knowledge of ACAS, Nessus, Elastic, SCAP, POA&Ms, NIST, NISPOM, system audits, vulnerability scanning, and RMF package development.
Strong oral and written communication skills.
Ability to work independently while collaborating effectively within a team environment.
U.S. Citizenship with Active Secret Security clearance and ability to maintain the designated security clearance level is required.
Desired Skills / Preferred Qualifications
Linux certification (Linux+, LPIC, RHCSA, or RHCE).
Previous experience supporting the Missile Defense Agency (MDA), its elements/components, or similar system-of-systems environments.
Experience working in DoD mission assurance or enterprise cybersecurity environments.
Desired Skill Sets/Preferred Qualifications:
Linux certification such as Linux+, LPIC, RHCSA, or RHCE.
Previous experience supporting the Missile Defense Agency (MDA), its elements/components, or comparable system-of-systems environments.
Experience in DoD mission assurance or enterprise cybersecurity operations.
Physical Description
Employees in these positions will function in a general office/cubicle setting environment, and laboratory/testing setting using standard office equipment and various electronic testing equipment, including a computer, telephone, printers, video equipment, computer software, and testing equipment. Will interact in a general office setting environment with various personnel; participate in meetings and contribute to team success; deliver timely results and produce reports; receive and communicate information; may include telework. May function in a specialized laboratory/testing environment using electronic testing equipment, computer software, and complex systems. May move and test equipment of various weights. Laboratory environment may require use of protective equipment (PPE) including but not limited to safety glasses and protective hearing and footwear. May be expected to work varying shifts and hours to ensure successful operation of activities in the organization due to business demands; travel occasionally for assigned work.
About SimTech, Inc.
SimTech's mission is to be the most reliable and cost-effective provider of Signature Models, Simulations, Hardware, Software, Cyber solutions, and Test & Evaluation services. Established in 1983 by a team of experienced scientists and engineers, SimTech has a long history of delivering high-technology defense-oriented solutions.
The company has been recognized as a "Best Place to Work" in 2020 and 2021, and as a "Best Place for Working Parents" in 2022-2026 by the Huntsville/Madison County Chamber of Commerce.
SimTech offers an industry-leading comprehensive compensation and benefits package. Be a part of over 43+ years of excellence-join our team today!
To learn more about our exceptional team and employee benefits, contact SimTech HR or visit www.simtechinc.com for more information.
Equal Employment Opportunity and Affirmative Action Employer
SimTech, Inc. is an Equal Opportunity/Affirmative Action Employer. SimTech, Inc. is a committed EOE/Vet/Disabled employer.
Simulation Technologies, Inc. (SimTech) is an Equal Employment Opportunity employer and provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in its job application procedures. If you have any difficulty using our online system and you need an accommodation due to a disability, you may use the following email address, HR@simtechinc.com and/or phone number (256.428.2910) to contact us about your interest in employment with SimTech.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. SimTech participates in E-Verify.
Cyber Security Engineer, Mid/Senior
Overview
SimTech, Inc., recognized as one of the 2026 Best Places for Working Parents, is seeking a Cyber Security Engineer, Mid/Senior to join our dynamic and diverse team in Huntsville, AL. This is an upcoming opening with opportunities for growth and professional development.
SimTech offers a market leading compensation package with excellent benefits, work/life balance, outstanding retirement plan, career advancement and much more.
The Cyber Security Engineer, Mid/Senior is responsible for ensuring software applications, systems, and networks comply with Department of Defense cybersecurity and risk management requirements. This role conducts security assessments, vulnerability analysis, compliance audits, and continuous monitoring to evaluate and strengthen system security.
Responsibilities
Utilizing best practices and methods for monitoring, auditing, and measuring risk, compliance, and assurance efforts.
Ensuring risk, compliance, and assurance efforts conform to Department of War (DoW) security, resilience, and dependability requirements at the software application, system, and network levels.
Documenting preliminary or residual security risks for system operation.
Verifying that the software application/network/system authorization and assurance documentation is current.
Monitoring and evaluating a system's compliance with DoW security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results and analyzing the differences to identify impact and risks.
Provide an accurate technical evaluation of the software application, system, or network, documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls.
Recommending new or revised security measures and countermeasures based on risk analysis then verifying that security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
Responsible for the operation of DOW tools, security monitoring and auditing solution utilizing a COTS product i.e. (Elastic Endpoint Security Solutions (ESS), etc.) and industry wide best practices.
Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in the security plan.
Conduct annual inspections to validate system updates, configuration compliance utilizing technical scans, and physical observations at domestic and foreign sites (~10% travel).
Data collection, documentation and reporting on all the above responsibilities as required. Perform other duties as assigned to realize mission success.
Support Stakeholders in the operation of the comprehensive Elastic platform in terms of know-how and the technologies used.
Performs other duties as assigned.
Minimum Qualifications & Education Requirements and Desired Skillsets
Experience Requirements
Bachelor's degree in Computer Science or a related field, or equivalent experience (experience may be substituted for a degree).
Mid and Senior-Level candidates considered (5-20 years).
5+ years of cybersecurity experience, preferably supporting Department of Defense (DoD) environments.
5+ years of experience administering and securing Red Hat Enterprise Linux (RHEL) operating systems.
5+ years of experience with DoD cybersecurity tools and processes, including eMASS, STIGs, IAVAs, ACAS/Nessus, SCAP, and RMF documentation.
5+ years of experience conducting vulnerability assessments, system audits, POA&M management, and RMF package development.
5+ years of experience working with cybersecurity frameworks and standards such as NIST and NISPOM.
Minimum Qualifications
Meet DoD 8570 Information Assurance Technical (IAT) Level III or Information Assurance Management (IAM) Level III certification requirements upon employment (e.g., CISSP or CISM).
Experience with Red Hat Enterprise Linux (RHEL) operating systems.
Working knowledge of DoD security policies and procedures.
Understanding of Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIGs), IAVAs, Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP), and Evaluate-STIG Validation Tool.
Knowledge of ACAS, Nessus, Elastic, SCAP, POA&Ms, NIST, NISPOM, system audits, vulnerability scanning, and RMF package development.
Strong oral and written communication skills.
Ability to work independently while collaborating effectively within a team environment.
U.S. Citizenship with Active Secret Security clearance and ability to maintain the designated security clearance level is required.
Desired Skills / Preferred Qualifications
Linux certification (Linux+, LPIC, RHCSA, or RHCE).
Previous experience supporting the Missile Defense Agency (MDA), its elements/components, or similar system-of-systems environments.
Experience working in DoD mission assurance or enterprise cybersecurity environments.
Desired Skill Sets/Preferred Qualifications:
Linux certification such as Linux+, LPIC, RHCSA, or RHCE.
Previous experience supporting the Missile Defense Agency (MDA), its elements/components, or comparable system-of-systems environments.
Experience in DoD mission assurance or enterprise cybersecurity operations.
Physical Description
Employees in these positions will function in a general office/cubicle setting environment, and laboratory/testing setting using standard office equipment and various electronic testing equipment, including a computer, telephone, printers, video equipment, computer software, and testing equipment. Will interact in a general office setting environment with various personnel; participate in meetings and contribute to team success; deliver timely results and produce reports; receive and communicate information; may include telework. May function in a specialized laboratory/testing environment using electronic testing equipment, computer software, and complex systems. May move and test equipment of various weights. Laboratory environment may require use of protective equipment (PPE) including but not limited to safety glasses and protective hearing and footwear. May be expected to work varying shifts and hours to ensure successful operation of activities in the organization due to business demands; travel occasionally for assigned work.
About SimTech, Inc.
SimTech's mission is to be the most reliable and cost-effective provider of Signature Models, Simulations, Hardware, Software, Cyber solutions, and Test & Evaluation services. Established in 1983 by a team of experienced scientists and engineers, SimTech has a long history of delivering high-technology defense-oriented solutions.
The company has been recognized as a "Best Place to Work" in 2020 and 2021, and as a "Best Place for Working Parents" in 2022-2026 by the Huntsville/Madison County Chamber of Commerce.
SimTech offers an industry-leading comprehensive compensation and benefits package. Be a part of over 43+ years of excellence-join our team today!
To learn more about our exceptional team and employee benefits, contact SimTech HR or visit www.simtechinc.com for more information.
Equal Employment Opportunity and Affirmative Action Employer
SimTech, Inc. is an Equal Opportunity/Affirmative Action Employer. SimTech, Inc. is a committed EOE/Vet/Disabled employer.
Simulation Technologies, Inc. (SimTech) is an Equal Employment Opportunity employer and provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in its job application procedures. If you have any difficulty using our online system and you need an accommodation due to a disability, you may use the following email address, HR@simtechinc.com and/or phone number (256.428.2910) to contact us about your interest in employment with SimTech.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. SimTech participates in E-Verify.
See All 66 Product Security Engineer Jobs in Alabama
Find roles in Alabama that match your experience and apply in just a few clicks.
Find JobsProduct Security Engineer Jobs by City in Alabama
Where Alabama roles are concentrated, by current openings.
Product Security Engineer Job Market in Alabama
A snapshot from current Alabama openings, updated as new roles post.
Who's Hiring
- Amentum4
- Lockheed Martin4
- System High Corporation4
- Convergint3
- Everforth ECS3E
Top Industries Hiring
- Consulting & Professional Services6
- Manufacturing3
- Education2
- Staffing & Recruiting2
- Technology & Software2
What Alabama Employers Look For
The qualifications that appear most often in product security engineer jobs across Alabama.
- Bachelor's degree in computer science, cybersecurity, or a directly related engineering field
- Industry certification such as CISSP, CEH, or CSSLP recognized by Alabama federal contractors
- Hands-on experience with secure software development lifecycle and threat modeling methodologies
- Proficiency with static and dynamic application security testing tools and vulnerability management platforms
- Ability to obtain or hold an active U.S. security clearance for defense-sector roles in Huntsville
- Familiarity with compliance frameworks such as NIST, FedRAMP, or CMMC relevant to Alabama government contracts
Product Security Engineer Jobs in Alabama: Frequently Asked Questions
How do you become a product security engineer in Alabama?
Most Alabama employers require a bachelor's degree in computer science, cybersecurity, or software engineering as the foundation. Alabama does not issue a state-specific license for product security engineers, but hiring is heavily influenced by industry certifications such as CISSP, CSSLP, or CompTIA Security+. Defense contractors in Huntsville additionally require candidates to obtain a federal security clearance, which involves a background investigation initiated by the sponsoring employer.
Which companies hire product security engineers in Alabama?
Employers hiring product security engineers in Alabama right now include Amentum, Lockheed Martin, and System High Corporation, based on current listings on Migrate Mate as of July 2026. Alabama's defense and aerospace concentration in Huntsville means federal contractors and systems integrators account for a significant share of these openings alongside Birmingham-based financial and technology firms.
Which Alabama cities have the most product security engineer jobs?
Huntsville, Birmingham, and Montgomery have the most product security engineer openings in Alabama. Huntsville dominates because of Redstone Arsenal and the dense cluster of aerospace and defense contractors it anchors, while Birmingham's financial services sector and growing technology corridor drive demand there, and Tuscaloosa's proximity to manufacturing and automotive suppliers accounts for the engineering security roles concentrated in that market.
Are there remote product security engineer jobs in Alabama?
Yes, and more than most engineering fields, since product security work centers on code review, threat modeling, and tooling that travels well to a remote setup. About 33% of product security engineer openings tied to Alabama are remote or hybrid as of July 2026, reflecting broad employer comfort with distributed security teams. The most consistently remote roles involve application security assessment and security architecture review rather than on-site hardware or embedded systems work.
How can I get hired as a product security engineer in Alabama with little or no experience?
The most realistic entry path is transitioning from a software development or IT security analyst role, since Alabama employers routinely promote from those adjacent positions into product security. Large Huntsville defense contractors such as Northrop Grumman and SAIC offer early-career rotational and associate programs that include security engineering tracks. Earning a CompTIA Security+ or CSSLP and building a portfolio of capture-the-flag or bug-bounty work gives candidates a measurable edge when applying to these programs without a full professional background.
Where can I find and apply to product security engineer jobs in Alabama?
You can find and apply to product security engineer jobs in Alabama on Migrate Mate, which lists current Alabama openings updated continuously. Search the roles available, identify the ones that match your experience and location preference, and apply directly through each listing without any extra steps.
See All 66 Product Security Engineer Jobs in Alabama
Find roles in Alabama that match your experience and apply in just a few clicks.
Find Jobs