Cybersecurity Engineer, Product Cybersecurity

12 days ago

Pittsburgh, PA, USASenior

Base Salary

$91k - $130k/yr

Responsibilities

Conduct cybersecurity reviews and assessments of Wabtec products throughout the software development lifecycle.
Perform threat modeling, threat and risk assessments, security analyses, attack-surface analysis, vulnerability assessments, and security testing.
Advise engineering teams, product managers, leadership, and other stakeholders on cybersecurity principles, secure design, technical controls, and risk mitigation.
Support cybersecurity consulting across connected products, web services, industrial systems, and embedded product portfolios.
Recommend secure design principles, software security controls, hardening strategies, and measures to reduce attack surfaces.
Investigate cybersecurity defects, perform root cause analyses, and support corrective and preventive actions.
Develop and deliver cybersecurity training and awareness programs.
Contribute to cybersecurity standards, procedures, technical controls, and best practices.
Integrate cybersecurity requirements into product architectures, designs, and development processes.
Support vulnerability disclosure, remediation planning, and product security incident response activities.

Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
8–10 years of experience in the design, development, and testing of web-based, embedded, and/or connected systems.
At least 4 years of hands-on experience in product or application cybersecurity engineering, architecture, risk assessment, or risk management.
Hands-on experience with threat modeling, attack-surface analysis, vulnerability assessments, security testing, and security risk assessment methodologies and tools.
Experience applying IEC 62443, NIST 800-53, NIST Cybersecurity Framework, ISO/IEC 27001, or equivalent standards and frameworks.
Experience with secure product development processes and DevSecOps practices.
Experience with security architecture and cryptographic technologies, including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
Industrial-sector experience in rail, transportation, mining, automotive, manufacturing, or critical infrastructure is preferred.
Strong analytical, organizational, problem-solving, communication, presentation, stakeholder-management, collaboration, and prioritization skills.
Ability to work independently, influence technical decisions, and drive cybersecurity improvements across global teams and external partners.
Current knowledge of evolving cybersecurity threats, technologies, and industry trends.

Health, welfare, and retirement benefits are available.
Annual bonus may be offered if eligible.
The stated base salary range is $91000–129800 and may vary based on qualifications, experience, education, business needs, market demands, and work location.

10,000+ employees