Staff Security Engineer
Westinghouse Air Brake Technologies Corporation2 months ago
Bengaluru, IndiaStaff+
Responsibilities
- Lead the enterprise vulnerability management program across global technology environments.
- Manage vulnerability scanning platforms, assessment processes, remediation workflows, and enterprise security exposure reporting.
- Develop and improve risk-based vulnerability prioritization methodologies using threat intelligence, exploitability data, vulnerability scoring, and business context.
- Partner with infrastructure, cloud, application, operations, architecture, compliance, and business teams to drive vulnerability and control-gap remediation.
- Monitor remediation performance, establish service-level targets, and report risk reduction and remediation progress to leadership and stakeholders.
- Conduct vulnerability trend analysis and recommend strategic improvements for systemic security issues.
- Assess cloud environments for misconfigurations, vulnerabilities, and compliance risks.
- Collaborate with Security Operations to investigate critical vulnerabilities, active threats, and emerging enterprise security risks.
- Support threat management by evaluating threat intelligence and newly disclosed vulnerabilities and security advisories.
- Perform vulnerability validation, remediation verification, exception management, audit support, and compliance evidence collection.
- Lead and participate in cybersecurity projects involving security tools, platforms, and process improvements.
- Maintain vulnerability management standards, procedures, operational runbooks, and technical documentation.
- Provide Tier 3 escalation support for vulnerability management and related cybersecurity technologies.
- Evaluate new security technologies and industry practices to improve enterprise cybersecurity maturity.
- Support cybersecurity incidents, emergency activities, and planned maintenance during weekends or off-hours as required.
Requirements
- Bachelor’s degree in computer science, information technology, cybersecurity, or a related field, or at least five years of full-time cybersecurity experience.
- Demonstrated expertise leading enterprise vulnerability management programs across servers, endpoints, cloud platforms, applications, and network infrastructure.
- Extensive experience with vulnerability assessment technologies, remediation workflows, risk prioritization methodologies, and security exposure management.
- Strong understanding of vulnerability scoring frameworks, threat intelligence, exploitability analysis, and risk-based remediation.
- Experience developing metrics, reporting, and executive-level dashboards for security risk and remediation progress.
- Hands-on experience securing public cloud platforms such as AWS and Azure.
- Experience supporting Security Operations functions including threat detection, incident response, threat hunting, or security monitoring.
- Knowledge of enterprise operating systems, networking, system administration, and infrastructure technologies.
- Experience partnering with technical and business stakeholders across globally distributed environments to drive remediation.
- Strong project execution, communication, stakeholder management, time management, and influencing skills.
- Experience managing workstreams and maintaining operational transparency through IT Service Management platforms.
- Willingness to work weekends or off-shift hours during cybersecurity incidents.
- Preferred experience implementing Exposure Management or Attack Surface Management programs.
- Preferred experience integrating vulnerability management with Security Operations and Incident Response.
- Preferred knowledge of container, Kubernetes, and cloud-native security technologies.
- Preferred experience automating vulnerability management workflows using scripting or API integrations.
- Security certifications such as CISSP, GSEC, GCIH, Security+, or equivalent are preferred.
- Commitment to continuous learning and adaptation in an evolving cybersecurity landscape.
Benefits
- Hybrid work schedule with both on-site and remote work.
- Relocation assistance availability is confirmed.
- The role includes a temperature-controlled office environment, with occasional exposure to operational-area weather, fumes, chemicals, and loud noise.
- The position may require weekend or off-shift work for cybersecurity incidents, emergency activities, and planned maintenance.
- Equal employment opportunity and accommodation support are provided.
Tech Stack
Categories
About Westinghouse Air Brake Technologies Corporation
Westinghouse Air Brake Technologies Corporation (Wabtec) builds freight locomotives, braking and signaling systems, rail components, and software used by freight railroads, transit agencies, and industrial operators. The Pittsburgh-based public company (NYSE: WAB) sells original equipment, digital solutions, and aftermarket services worldwide; it combined with GE Transportation in 2019 and traces its roots to George Westinghouse’s 19th‑century air brake business. Its portfolio spans rolling stock, parts, condition‑monitoring, and train control platforms.