Staff Security Engineer
Westinghouse Air Brake Technologies Corporation9 hours ago
Contagem, BrazilStaff+
Responsibilities
- Lead the enterprise vulnerability management program across global on-premises, cloud, application, network, and M&A environments.
- Manage vulnerability scanning platforms, assessment processes, remediation workflows, reporting, service-level targets, and enterprise security exposure visibility.
- Develop and improve risk-based prioritization methodologies using threat intelligence, exploitability data, vulnerability scoring, and business context.
- Partner with infrastructure, cloud, application, operations, architecture, compliance, and business teams to drive remediation of vulnerabilities and control weaknesses.
- Monitor remediation performance, conduct trend analysis, and report risk reduction progress through executive dashboards and stakeholder communications.
- Support cloud security assessments, Security Operations, threat management, vulnerability validation, incident response, threat hunting, and security monitoring activities.
- Develop and maintain vulnerability management standards, procedures, runbooks, technical documentation, and operational processes.
- Provide Tier 3 escalation support, support audits and regulatory activities, evaluate security technologies, and participate in cybersecurity projects.
- Support cybersecurity incidents, emergency activities, and planned maintenance during weekends or off-hours as required.
Requirements
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field, or proven full-time cybersecurity experience.
- Demonstrated expertise leading enterprise vulnerability management programs across servers, endpoints, cloud platforms, applications, and network infrastructure.
- Extensive experience with vulnerability assessment technologies, remediation workflows, risk prioritization, security exposure management, vulnerability scoring, threat intelligence, and exploitability analysis.
- Experience developing metrics, reports, and executive-level dashboards for security risk and remediation progress.
- Hands-on experience securing public cloud platforms such as AWS and Azure.
- Experience supporting threat detection, incident response, threat hunting, or security monitoring functions.
- Knowledge of enterprise operating systems, networking, system administration, and infrastructure technologies.
- Experience partnering with technical and business stakeholders across globally distributed environments and managing workstreams through IT Service Management platforms.
- Preferred experience with Exposure Management, Attack Surface Management, container security, Kubernetes, cloud-native security, vulnerability-management automation, scripting, or API integrations.
- Preferred security certifications include CISSP, GSEC, GCIH, Security+, or equivalent.
- Strong project execution, communication, influencing, stakeholder management, independence, time management, and continuous-learning skills.
- Willingness to work weekends or off-shift hours as needed during cybersecurity incidents.
Benefits
- Medical, dental, life insurance, pharmacy assistance, private pension, profit sharing, and meal policy benefits according to location.
- Employee Assistance Program offering psychological, legal, financial, and social support, plus Headspace and Wellhub access.
- Extended maternity leave, Christmas gifts or baskets according to location, and gifts for employees’ children up to age 11.
- Language incentive policy, mentorship programs, and access to a training platform.
- Weekend or off-shift work may be required for cybersecurity incidents, emergency activities, and planned maintenance.
Tech Stack
Categories
About Westinghouse Air Brake Technologies Corporation
Westinghouse Air Brake Technologies Corporation (Wabtec) builds freight locomotives, braking and signaling systems, rail components, and software used by freight railroads, transit agencies, and industrial operators. The Pittsburgh-based public company (NYSE: WAB) sells original equipment, digital solutions, and aftermarket services worldwide; it combined with GE Transportation in 2019 and traces its roots to George Westinghouse’s 19th‑century air brake business. Its portfolio spans rolling stock, parts, condition‑monitoring, and train control platforms.