Business Unit:
Cubic Defense
Company Details:
When you join Cubic, you become part of a company that creates and delivers technology solutions in transportation to make people’s lives easier by simplifying their daily journeys, and defense capabilities to help promote mission success and safety for those who serve their nation. Led by our talented teams around the world, Cubic is committed to solving global issues through innovation and service to our customers and partners.
We have a top-tier portfolio of businesses, including Cubic Transportation Systems (CTS) and Cubic Defense (CD). Explore more on Cubic.com.
Job Details:
The Information Systems Security Engineer (ISSE), serving within the Product Security Team, supports the security of deployed products throughout their sustainment lifecycle.
This position provides primary ownership of product security activities for assigned product(s), including information assurance artifact review and submission, security assessments, software baseline assessments, and the coordination of supporting technical evidence.
The ISSE reviews submissions for completeness and compliance, identifies security and documentation gaps, and tracks actions through resolution, approval, and closure. The engineer works independently and collaboratively with product management, software and systems engineering, program personnel, and other security stakeholders.
In addition to assigned product responsibilities, this individual will collaborate with other Product Security Team members to swarm priority assessments and support broad security activities across multiple projects and products.
Essential Job Duties and Responsibilities
Own the day-to-day execution of product security activities for assigned deployed products and projects.
Coordinate security approval and assessment activities, including software approvals, security posture updates, and software baseline assessments intake, planning, evidence collection, review, tracking, approval, and closure.
Review information assurance, technical, and security artifacts for completeness, accuracy, traceability, and compliance with applicable requirements.
Assess security evidence and identify documentation, control, vulnerability, and process gaps.
Communicate clear remediation actions, responsible parties, completion criteria, and associated security risks.
Coordinate with product management, software and systems engineering, program personnel, security personnel, and other stakeholders to obtain required evidence and meet delivery commitments.
Maintain auditable records, status dashboards, procedures, checklists, templates, and metrics for Product Security Team activities.
Provide timely status updates and escalate schedule, evidence, resource, and security-risk concerns when appropriate.
Collaborate with other Product Security Team members to swarm priority assessments, and other product or project security efforts.
Support vulnerability management, system hardening, security-control assessment, and secure-software activities throughout the product lifecycle.
Interpret applicable cybersecurity policies, standards, contractual requirements, and regulatory guidance.
Contribute to continuous process improvement, automation, and the development of reusable product security guidance.
Document recurring processes and cross-train team members to improve operational continuity and reduce key-person dependencies.
Manage multiple concurrent workstreams while working under limited supervision.
Use approved artificial intelligence and automation tools to accelerate security artifact review, vulnerability analysis, assessment preparation, reporting, and other Product Security Team workflows.
Evaluate AI-generated results for accuracy, security, traceability, and compliance, applying independent engineering judgment before incorporating results into deliverables or decisions.
Identify opportunities to responsibly integrate AI into repeatable product security…