Cybersecurity Engineer, Product Cybersecurity
Westinghouse Air Brake Technologies Corporation2 months ago
Melbourne, FL, USASenior
Base Salary
$91k - $130k/yr
Responsibilities
- Conduct cybersecurity reviews and assessments of Wabtec products throughout the software development lifecycle.
- Perform threat modeling, threat and risk assessments, attack-surface analysis, vulnerability assessments, and security analyses.
- Advise engineering teams and product managers on cybersecurity principles, secure design, technical controls, hardening, and risk mitigation.
- Support cybersecurity consulting across connected products, web services, industrial systems, and embedded product portfolios.
- Investigate cybersecurity defects, conduct root-cause analyses, and support corrective and preventive actions.
- Develop and deliver cybersecurity training and awareness programs for technical and business stakeholders.
- Develop, document, and continuously improve cybersecurity standards, procedures, technical controls, and best practices.
- Integrate cybersecurity requirements into product architectures, designs, and development processes.
- Support vulnerability disclosure, remediation planning, and product security incident response activities.
- Influence cybersecurity improvements across global teams and external partners.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
- 8–10 years of experience in the design, development, and testing of web-based, embedded, and/or connected systems.
- At least 4 years of hands-on experience in product or application cybersecurity engineering, architecture, risk assessment, or risk management.
- Hands-on experience with threat modeling, attack-surface analysis, vulnerability assessments, security testing, and related methodologies and tools.
- Experience applying frameworks, regulations, and standards such as IEC 62443, NIST 800-53, the NIST Cybersecurity Framework, or ISO/IEC 27001.
- Experience with secure product development processes and DevSecOps practices.
- Experience with security architecture and cryptographic technologies including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
- Industrial-sector experience in rail, transportation, mining, automotive, manufacturing, or critical infrastructure is preferred.
- Strong analytical, organizational, problem-solving, communication, presentation, stakeholder-management, collaboration, and prioritization skills.
- Ability to work independently and manage multiple priorities in a global, matrixed organization.
- Current knowledge of evolving cybersecurity threats, technologies, and industry trends.
Benefits
- Health, welfare, and retirement benefits are available.
- Annual bonus may be offered if eligible.
- The posted base salary range is $91000–129800.
- The role is part of a global, international, matrixed organization.
About Westinghouse Air Brake Technologies Corporation
Westinghouse Air Brake Technologies Corporation (Wabtec) builds freight locomotives, braking and signaling systems, rail components, and software used by freight railroads, transit agencies, and industrial operators. The Pittsburgh-based public company (NYSE: WAB) sells original equipment, digital solutions, and aftermarket services worldwide; it combined with GE Transportation in 2019 and traces its roots to George Westinghouse’s 19th‑century air brake business. Its portfolio spans rolling stock, parts, condition‑monitoring, and train control platforms.