Product Cyber Security Engineering

Cyber Security Contractor

Trip Optimizer is an Energy Management System designed to optimize and automate train operations by creating the most fuel-efficient operating plan while meeting customer scheduling and train handling requirements. In this role, the Cyber Security Contractor will work closely with the Product Cyber Champion, software development teams, systems engineers, and program leadership to support the cybersecurity posture of the Trip Optimizer and LOCOTROL product lines.

The contractor will serve as a key resource for cybersecurity compliance, vulnerability management, security assessments, and secure product development activities throughout the software lifecycle.

• Support cybersecurity activities across the product development lifecycle.
• Coordinate and maintain Cybersecurity Assurance Technical Output (CATO) documentation and evidence packages.
• Perform and track vulnerability assessments, security scans, and remediation activities using Polaris, Blackduck, and other approved security tools.
• Review software designs, architectures, and requirements for cybersecurity risks and compliance.
• Support threat modeling, risk assessments, and security impact analyses.
• Track cybersecurity findings and collaborate with engineering teams to drive mitigation and closure.
• Assist with compliance activities related to industry cybersecurity standards, customer requirements, and internal policies.
• Support cybersecurity audits, reviews, and readiness assessments.
• Develop and maintain cybersecurity metrics, dashboards, and status reporting.
• Provide guidance on secure C++ coding practices, vulnerability remediation, and cybersecurity best practices.
• Collaborate with cross-functional teams to integrate cybersecurity requirements into product development processes.

• Bachelor's Degree in Cyber Security, Information Security, Computer Science, Software Engineering, Computer Engineering, or a related technical field.
• Experience supporting cybersecurity initiatives within software, embedded systems, or industrial control environments.
• Experience with security scanning and analysis tools.
• Understanding of common cybersecurity frameworks and standards.
• Strong technical documentation and communication skills.
• Ability to work independently and effectively with cross-functional engineering teams.
• Knowledge of cybersecurity principles including:
• Vulnerability Management
• Threat Modeling
• Risk Assessment
• Secure Software Development Lifecycle (SSDLC)
• Security Compliance and Governance

• Experience with Polaris, Coverity, SAST, DAST, or Software Composition Analysis (SCA) tools
• Familiarity with embedded systems (C++) and Real-Time Operating Systems (RTOS), including QNX Neutrino.
• Experience supporting cybersecurity documentation and cybersecurity compliance programs.
• Experience with Dev Ops/Dev Sec Ops  methodologies and CI/CD security integration.
• Experience with Git Lab, Jenkins, and associated security pipelines
• Experience with IBM ELM Tool Suite
• Security certifications such as Security+, CISSP, GSEC, SSCP, or equivalent.
• Experience in transportation, rail, industrial automation, or safety-critical environments.
• Knowledge of cybersecurity standards such as:
• IEC 62443
• NIST Cybersecurity Framework
• NIST 800-53

The typical base pay for this role across the U.S. is: $63.00 - $70.00 /hr. Non-exempt positions are eligible for overtime at a rate of 1.5 times the base hourly rate for all hours worked in excess of 40 in a work week, or as required by state or local law. Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education and experience.

Full-time employees are eligible to select from different benefits packages. Packages may include medical, dental, and vision benefits, health savings accounts with qualified medical plan enrollment, 10 paid days off, 3 days paid bereavement leave, 401(k) plan participation with employer match, life and disability insurance, commuter benefits, dependent care flexible spending account, accident insurance, critical illness insurance, hospital indemnity insurance, accommodations and reimbursement for work travel, and discretionary performance or recognition bonus.

Sick leave and mobile phone reimbursement provided based on state or local law.