Information Systems Security Engineer - Product Security

About the role

Business Unit: Cubic Defense

Company Details

When you join Cubic, you become part of a company that creates and delivers technology solutions in transportation to make people's lives easier by simplifying their daily journeys, and defense capabilities to help promote mission success and safety for those who serve their nation. Led by our talented teams around the world, Cubic is committed to solving global issues through innovation and service to our customers and partners.

We have a top-tier portfolio of businesses, including Cubic Transportation Systems (CTS) and Cubic Defense (CD). Explore more on Cubic.com.

Job Details

The Information Systems Security Engineer (ISSE), serving within the Product Security Team, supports the security of deployed products throughout their sustainment lifecycle.

This position provides primary ownership of product security activities for assigned product(s), including information assurance artifact review and submission, security assessments, software baseline assessments, and the coordination of supporting technical evidence.

The ISSE reviews submissions for completeness and compliance, identifies security and documentation gaps, and tracks actions through resolution, approval, and closure. The engineer works independently and collaboratively with product management, software and systems engineering, program personnel, and other security stakeholders.

In addition to assigned product responsibilities, this individual will collaborate with other Product Security Team members to swarm priority assessments and support broad security activities across multiple projects and products.

Essential Job Duties and Responsibilities

• Own the day-to-day execution of product security activities for assigned deployed products and projects.
• Coordinate security approval and assessment activities, including software approvals, security posture updates, and software baseline assessments intake, planning, evidence collection, review, tracking, approval, and closure.
• Review information assurance, technical, and security artifacts for completeness, accuracy, traceability, and compliance with applicable requirements.
• Assess security evidence and identify documentation, control, vulnerability, and process gaps.
• Communicate clear remediation actions, responsible parties, completion criteria, and associated security risks.
• Coordinate with product management, software and systems engineering, program personnel, security personnel, and other stakeholders to obtain required evidence and meet delivery commitments.
• Maintain auditable records, status dashboards, procedures, checklists, templates, and metrics for Product Security Team activities.
• Provide timely status updates and escalate schedule, evidence, resource, and security-risk concerns when appropriate.
• Collaborate with other Product Security Team members to swarm priority assessments, and other product or project security efforts.
• Support vulnerability management, system hardening, security-control assessment, and secure-software activities throughout the product lifecycle.
• Interpret applicable cybersecurity policies, standards, contractual requirements, and regulatory guidance.
• Contribute to continuous process improvement, automation, and the development of reusable product security guidance.
• Document recurring processes and cross-train team members to improve operational continuity and reduce key-person dependencies.
• Manage multiple concurrent workstreams while working under limited supervision.
• Use approved artificial intelligence and automation tools to accelerate security artifact review, vulnerability analysis, assessment preparation, reporting, and other Product Security Team workflows.
• Evaluate AI-generated results for accuracy, security, traceability, and compliance, applying independent engineering judgment before incorporating results into deliverables or decisions.
• Identify opportunities to responsibly integrate AI into repeatable product security processes while protecting proprietary, controlled, and sensitive information.

Minimum Job Requirements

• Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related discipline, with a minimum of five years of relevant experience; an equivalent combination of education and experience may be considered.
• Experience working as an ISSE, Cybersecurity Engineer, Product Security Engineer, or in a comparable information assurance or security-compliance role.
• Experience coordinating security assessments, compliance packages, technical evidence, or comparable lifecycle deliverables.
• Working knowledge of vulnerability management, security controls, risk assessment, system and software development, and technical documentation.
• Ability to review technical artifacts, identify security and compliance gaps, and translate findings into actionable recommendations.
• Experience applying generative AI, scripting, or workflow automation to cybersecurity engineering, vulnerability management, compliance, or technical-documentation activities.
• Proven ability to manage multiple assignments, stakeholders, priorities, and deadlines.
• Strong analytical, organizational, problem-solving, and decision-making skills.
• Excellent written and verbal communication skills, including the ability to communicate with technical and nontechnical stakeholders.
• Strong self-directed work habits, initiative, professionalism, and teamwork skills.
• Familiarity with RMF, NIST security controls, STIGs, secure software development, software inventories or SBOMs, and DevSecOps environments is preferred.
• Security+, CISSP, CSSLP, or another relevant cybersecurity certification is preferred.

Eligibility

• U.S. citizenship is required due to the U.S. Government security-clearance requirements associated with this position.
• The candidate must be able to obtain and maintain Top Secret security-clearance eligibility and eligibility for access to Sensitive Compartmented Information (TS/SCI). Continued employment will be subject to satisfying applicable government and customer security requirements.
• The candidate must be willing and able to successfully complete a Counterintelligence Scope Polygraph if required by the customer.
• The candidate must maintain the required security eligibility and SCI access throughout employment and comply with all applicable government and customer security requirements.
• Ability to perform classified work in an approved secure facility, including a Sensitive Compartmented Information Facility (SCIF), as required.

Cubic Pay Range

$127,000.00 - $142,000.00 + benefits.

The Cubic pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

#LI-MA1