Transit Cybersecurity Engineer

PEMCCO is seeking a Transit Cybersecurity Engineer to support secure architecture review and risk mitigation for the 800 MHz communications modernization of a large urban multi‑modal transit system. This role strengthens long‑term communications resilience for a high‑ridership, safety‑critical transportation network and ensures alignment with public‑sector cybersecurity frameworks. The ideal candidate will enhance security across distributed communications infrastructure environments while supporting a robust and future‑ready modernization effort.

PEMCCO, Inc. is an Information Technology and Information Management (IT/IM) services firm. We assist our customers in maximizing existing and emerging technologies to achieve their desired business productivity objectives. Living the Culture and Making It Happen is the motto we live by. We Live the Culture by carrying out the tenets of our Core Values of Loyalty, Integrity, and Commitment to our Customers and Employees every day. We Make It Happen by following Smart Organization Healthy Organization (SOHO) principles for internal and external communications and the successful execution of projects.

This role follows a Hybrid/On‑Site schedule; however, candidates should anticipate substantial on‑site coordination within active rail and bus operational environments.

Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

• Review proposed 800 MHz radio architecture for cybersecurity vulnerabilities.


• Assess secure configuration of communications interfaces.


• Support cybersecurity risk assessments for voice and data systems.


• Coordinate compliance alignment with IT security stakeholders.


• Document mitigation strategies and security recommendations.


• Evaluate security exposure in distributed underground and above-ground RF infrastructure environments.


• Support audit documentation and compliance tracking.


• Contribute to cybersecurity requirements in future procurement documents.

Competencies

• Risk assessment and mitigation planning


• Secure systems architecture review


• Regulatory compliance awareness


• Technical documentation and stakeholder communication
  

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Engineering, or related discipline.


• Minimum 6 years of cybersecurity experience supporting critical infrastructure environments.

Preferred Qualifications

• Experience supporting public-sector communications systems.


• Familiarity with NIST or CJIS security frameworks.
  


• Candidates with experience in transit, public safety, or large‑scale infrastructure projects are strongly preferred.

Certifications / Licenses

• CISSP, CISM, or equivalent (Preferred)
  

Benefits

• 15 days of Paid Time Off


• 11 Paid Holidays


• Medical, Dental, and Vision


• Voluntary Short-Term Disability, Life Insurance, Accident, Critical Illness, Hospital Indemnity, Whole Life Plus, Identity Theft, and Law Assure


• 401(k)


• Employee Assistance Program (EAP)

Compensation
• $44.64 – $60.51 hourly, depending on experience, ability, capability, and certifications.

PEMCCO, Inc. is an equal-opportunity employer. The Company does not discriminate based on race, color, sex, sexual orientation, gender identity or expression, religion, national origin, age, disability, genetic information, military or veteran status, pregnancy, childbirth, and related medical conditions, or any other characteristics protected by applicable federal, state, or local law.