Cybersecurity Engineer - Product Cybersecurity
Summary: The Cybersecurity Engineer is responsible for ongoing cybersecurity assessments of Wabtec products to determine whether they comply with applicable Wabtec cybersecurity standards and technical controls. They will advise product managers and engineering teams, create awareness of cybersecurity standards and technical controls, and recommend best practices for satisfying these standards and controls for all Wabtec products offered or made available for customers. They will work closely with others to define and maintain technical controls to address external standards, Wabtec standards, and product requirements. Duties and Responsibilities:This position requires strong technical expertise in cybersecurity controls for mainly web and embedded systems.Key responsibilities include:Conduct cybersecurity reviews and assessments of Wabtec products throughout the Software Development Lifecycle (SDLC), evaluating compliance with Wabtec policies, standards, and technical controls.Partner with engineering teams to perform threat modeling, threat and risk assessments, and security analyses to identify vulnerabilities, attack vectors, and product threat surfaceProvide expert guidance on cybersecurity principles, technologies, and risk management, clearly communicating technical concepts to engineering teams, leadership, and non-technical stakeholders.Support cybersecurity consulting activities across Wabtec's connected products, web service, industrial systems and embedded product portfolios.Recommend secure design principles, software security controls, hardening strategies, and risk mitigation measures that reduce attack-surface while ensuring maintainability and operational efficiency.Support engineering teams in investigating cybersecurity defects, performing root cause analyses, and implementing corrective and preventive actions.Develop and deliver cybersecurity training and awareness programs for engineers, technical leaders, product managers, and business stakeholders.Contribute to the development, documentation, and continuous improvement of cybersecurity standards, procedures, technical controls, and best practices.Promote and share cybersecurity best practices across the organization to improve product security maturity and consistency.Collaborate with product development teams to integrate cybersecurity requirements into product architectures, designs, and development processes.Support vulnerability disclosure, remediation planning, and security incident response activities related to product cybersecurity.Perform other duties and special projects as assigned. Minimum Qualifications:Bachelor's degree in Computer Science, Cybersecurity, or a related field.8-10 years of experience in the design, development, and testing of web-based, embedded, and/or connected systems.4+ years of hands-on experience in product/application cybersecurity engineering, architecture, risk assessment, or risk management.Hands-on experience with security ris...