Business Unit:
Cubic Defense
Company Details:
When you join Cubic, you become part of a company that creates and delivers technology solutions in transportation to make people’s lives easier by simplifying their daily journeys, and defense capabilities to help promote mission success and safety for those who serve their nation. Led by our talented teams around the world, Cubic is committed to solving global issues through innovation and service to our customers and partners.
We have a top-tier portfolio of businesses, including Cubic Transportation Systems (CTS) and Cubic Defense (CD). Explore more on Cubic.com.
Job Details:
Information System Security Officer (ISSO)
Job Summary
Cubic Digital Intelligence (CDI) is seeking an Information System Security Officer (ISSO) to support Department of Defense (DoD) cybersecurity programs. The ISSO will be responsible for implementing and maintaining Risk Management Framework (RMF) activities, supporting system accreditation efforts, continuous monitoring, vulnerability management, and cybersecurity compliance across classified and unclassified environments. This position works closely with Program Managers, Information System Security Managers (ISSMs), System Owners, Engineers, and Government stakeholders to ensure systems maintain Authorization to Operate (ATO) while meeting applicable DoD and Federal cybersecurity requirements. The ISSO will develop and maintain cybersecurity documentation, coordinate remediation activities, support security assessments, and help strengthen the organization's overall security posture in support of critical national security missions.
Title: Information System Security Officer (ISSO)
Location: Fort Meade, MD
Clearance: Secret
Schedule: Full-Time
Work Arrangement: On-Site
Travel Requirements: Up to 10% travel for customer meetings, security assessments, and program support.
Essential Functions
- Support the implementation and sustainment of the Risk Management Framework (RMF) in accordance with NIST SP 800-37 and DoD RMF guidance.
- Develop, maintain, and update cybersecurity documentation, including SSPs, POA&Ms, Continuous Monitoring Plans, Configuration Management Plans, and Supply Chain Risk Management (SCRM) Plans.
- Review and analyze vulnerability scan results from ACAS/Nessus, Tenable, Trivy, OpenSCAP, and other security assessment tools while coordinating remediation efforts with engineering teams.
- Maintain and update authorization packages within eMASS and support security control implementation, assessment, and authorization activities.
- Track DISA task orders (DTOs), cybersecurity findings, POA&M items, and remediation milestones to ensure timely resolution and compliance with Government requirements.
- Participate in security assessments, vulnerability reviews, and compliance audits to validate adherence to DoD cybersecurity policies and standards.
- Prepare technical reports, executive briefings, and status updates related to cybersecurity compliance, vulnerabilities, and continuous monitoring activities.
Minimum Qualifications
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical discipline (or equivalent combination of education and experience).
- Three (3) or more years of experience supporting Information Assurance, RMF, cybersecurity compliance, or Information System Security Officer (ISSO) responsibilities within DoD or Federal environments.
- One or more DoD 8570/8140 IAT Level II certifications (e.g., Security+, CySA+, GSEC, SSCP, or equivalent).
- Active DoD Secret security clearance.
Preferred Qualifications
- Experience supporting classified DoD and working within cross-functional technical teams.
- Experience using eMASS to manage RMF authorization packages and continuous monitoring activities.
- Experience with Kubernetes, container technologies, cloud platforms, and container vulnerability management.
- Professional certifications such as CISSP, CISM, CAP, CASP+, CCSP, or GSLC.
Cubic Pay Range:
$109,000.00 - $124,000.00 + benefits.
The Cubic pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Worker Type:
Employee
We are committed to creating an inclusive workplace and welcome applications from people of all backgrounds. We do not discriminate based on any protected characteristic under applicable law.
