Information Systems Security Engineer – Product Security

Join Cubic Corporation in Ashburn, VA (onsite) as an Information Systems Security Engineer for Product Security, supporting the security of deployed products across their sustainment lifecycle. This role offers primary ownership of product security activities, helping ensure the right evidence, assessments, and remediation actions are captured, reviewed, and tracked to closure. You will also leverage approved artificial intelligence and automation tools to accelerate security artifact review, vulnerability analysis, assessment preparation, reporting, and other Product Security Team workflows.

What you’ll do

• Own day-to-day execution of product security activities for assigned deployed products and projects.
• Coordinate security approval and assessment activities, including software approvals, security posture updates, and software baseline assessments intake, planning, evidence collection, review, tracking, approval, and closure.
• Review information assurance, technical, and security artifacts for completeness, accuracy, traceability, and compliance with applicable requirements.
• Assess security evidence and identify documentation, control, vulnerability, and process gaps.
• Communicate remediation actions, responsible parties, completion criteria, and associated security risks.
• Coordinate across product management, software and systems engineering, program personnel, security personnel, and other stakeholders to obtain required evidence and meet delivery commitments.
• Maintain auditable records including status dashboards, procedures, checklists, templates, and metrics for Product Security Team activities.
• Provide timely status updates and escalate schedule, evidence, resource, and security-risk concerns when appropriate.
• Collaborate with other Product Security Team members to swarm priority assessments and other product or project security efforts.
• Support vulnerability management, system hardening, security-control assessment, and secure-software activities throughout the product lifecycle.
• Interpret applicable cybersecurity policies, standards, contractual requirements, and regulatory guidance.
• Drive continuous process improvement through automation and reusable product security guidance.
• Document recurring processes and cross-train team members to improve operational continuity and reduce key-person dependencies.
• Manage multiple concurrent workstreams under limited supervision.
• Use approved AI and automation to speed up artifact review and analysis, while evaluating AI-generated results for accuracy, security, traceability, and compliance before incorporating them into deliverables or decisions.
• Identify responsible opportunities to integrate AI into repeatable product security processes while protecting proprietary, controlled, and sensitive information.

What you bring

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related discipline, with a minimum of five years of relevant experience (an equivalent combination of education and experience may be considered).
• Experience as an ISSE, Cybersecurity Engineer, Product Security Engineer, or in a comparable information assurance or security-compliance role.
• Experience coordinating security assessments, compliance packages, technical evidence, or comparable lifecycle deliverables.
• Working knowledge of vulnerability management, security controls, risk assessment, system and software development, and technical documentation.
• Ability to review technical artifacts, identify security and compliance gaps, and translate findings into actionable recommendations.
• Experience applying generative AI, scripting, or workflow automation to cybersecurity engineering, vulnerability management, compliance, or technical-documentation activities.
• Proven ability to manage multiple assignments, stakeholders, priorities, and deadlines.
• Strong analytical, organizational, problem-solving, and decision-making skills.
• Excellent written and verbal communication skills for technical and nontechnical stakeholders.
• Strong self-directed work habits, initiative, professionalism, and teamwork skills.
• Familiarity with RMF, NIST security controls, STIGs, secure software development, software inventories or SBOMs, and DevSecOps environments is preferred.
• Security+, CISSP, CSSLP, or another relevant cybersecurity certification is preferred.

Technologies

Artificial intelligence, generative AI, RMF, NIST security controls, STIGs, SBOMs, DevSecOps

Eligibility / Clearance

• U.S. citizenship required due to U.S. Government security-clearance requirements.
• Must be able to obtain and maintain Top Secret security-clearance eligibility and eligibility for access to TS/SCI; continued employment depends on satisfying applicable government and customer security requirements.
• Willing and able to complete a Counterintelligence Scope Polygraph if required by the customer.
• Must maintain required security eligibility and SCI access throughout employment and comply with applicable government and customer security requirements.
• Ability to perform classified work in an approved secure facility, including a SCIF, as required.

Compensation and position details

• Cubic Pay Range: $127,000.00 - $142,000.00 + benefits
• Business Unit: Cubic Defense
• Worker Type: Employee