Product Cyber Security Engineering

Payrate: $63.00 - $70.00/hr.
 
Summary:
Trip Optimizer is an Energy Management System designed to optimize and automate train operations by creating the most fuel-efficient operating plan while meeting customer scheduling and train handling requirements. In this role, the Cyber Security Contractor will work closely with the Product Cyber Champion, software development teams, systems engineers, and program leadership to support the cybersecurity posture of the Trip Optimizer and LOCOTROL product lines. The contractor will serve as a key resource for cybersecurity compliance, vulnerability management, security assessments, and secure product development activities throughout the software lifecycle.
 
Responsibilities:

• Support cybersecurity activities across the product development lifecycle.
• Coordinate and maintain Cybersecurity Assurance Technical Output (CATO) documentation and evidence packages.
• Perform and track vulnerability assessments, security scans, and remediation activities using Polaris, Blackduck, and other approved security tools.
• Review software designs, architectures, and requirements for cybersecurity risks and compliance.
• Support threat modeling, risk assessments, and security impact analyses.
• Track cybersecurity findings and collaborate with engineering teams to drive mitigation and closure.
• Assist with compliance activities related to industry cybersecurity standards, customer requirements, and internal policies.
• Support cybersecurity audits, reviews, and readiness assessments.
• Develop and maintain cybersecurity metrics, dashboards, and status reporting.
• Provide guidance on secure C++ coding practices, vulnerability remediation, and cybersecurity best practices.
• Collaborate with cross-functional teams to integrate cybersecurity requirements into product development processes.

 
Qualifications:

• Bachelor's Degree in Cyber Security, Information Security, Computer Science, Software Engineering, Computer Engineering, or a related technical field.
• Experience supporting cybersecurity initiatives within software, embedded systems, or industrial control environments.
• Experience with security scanning and analysis tools.
• Understanding of common cybersecurity frameworks and standards.
• Strong technical documentation and communication skills.
• Ability to work independently and effectively with cross-functional engineering teams.
• Knowledge of cybersecurity principles including:
• Vulnerability Management
• Threat Modeling
• Risk Assessment
• Secure Software Development Lifecycle (SSDLC)
• Security Compliance and Governance

 
Preferred Additional Skills:

• Experience with Polaris, Coverity, SAST, DAST, or Software Composition Analysis (SCA) tools
• Familiarity with embedded systems (C++) and Real-Time Operating Systems (RTOS), including QNX Neutrino.
• Experience supporting cybersecurity documentation and cybersecurity compliance programs.
• Experience with DevOps/DevSecOps methodologies and CI/CD security integration.
• Experience with GitLab, Jenkins, and associated security pipelines
• Experience with IBM ELM Tool Suite
• Security certifications such as Security+, CISSP, GSEC, SSCP, or equivalent.
• Experience in transportation, rail, industrial automation, or safety-critical environments.
• Knowledge of cybersecurity standards such as:
• IEC 62443
• NIST Cybersecurity Framework
• NIST 800-53

 
Pay Transparency: The typical base pay for this role across the U.S. is: $63.00 - $70.00 /hr. Non-exempt positions are eligible for overtime at a rate of 1.5 times the base hourly rate for all hours worked in excess of 40 in a work week, or as required by state or local law. Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education and experience. Full-time employees are eligible to select from different benefits packages. Packages may include medical, dental, and vision benefits, health savings accounts with qualified medical plan enrollment, 10 paid days off, 3 days paid bereavement leave, 401(k) plan participation with employer match,life and disability insurance, commuter benefits, dependent care flexible spending account, accident insurance, critical illness insurance, hospital indemnity insurance, accommodations and reimbursement for work travel, and discretionary performance or recognition bonus. Sick leave and mobile phone reimbursement provided based on state or local law. 

Consent to Communication and Use of AI Technology: By submitting your application for this position and providing your email address(es) and/or phone number(s), you consent to receive text (SMS), email, and/or voice communication whether automated (including auto telephone dialing systems or automatic text messaging systems), pre-recorded, AI-assisted, or individually initiated from Aditi Consulting, our agents, representatives, or affiliates at the phone number and/or email address you have provided. These communications may include information about potential opportunities and information. Message and data rates may apply. Message frequency may vary.
You represent and warrant that the email address(es) and/or telephone number(s) you provided to us belong to you and that you are permitted to receive calls, text (SMS) messages, and/or emails at these contacts. You also acknowledge and agree to Aditi Consulting LLC’s use of AI technology during the sourcing process, including calls from an AI Voice Recruiter. AI is used solely to gather data and does not replace human-based decision-making in employment decisions. Calls may be recorded.

Consent is not a condition of purchasing any property, goods, or services. You may revoke your consent at any time by replying “STOP” to :messages or by contacting

privacy@aditiconsulting.com

. 

For information about our collection, use, and disclosure of applicant's personal information as well as applicants' rights over their personal information, please see our Privacy Policy
 
#AditiConsulting                              
#26-05232