Cybersecurity Engineer, Product Cybersecurity
Westinghouse Air Brake Technologies Corporation12 days ago
Melbourne, FL, USASenior
Base Salary
$91k - $130k/yr
Responsibilities
- Conduct cybersecurity reviews and assessments of Wabtec products throughout the software development lifecycle.
- Perform threat modeling, threat and risk assessments, attack-surface analysis, vulnerability assessments, and security analyses.
- Advise engineering teams and product managers on cybersecurity principles, secure design, technical controls, hardening, and risk mitigation.
- Support cybersecurity consulting across connected products, web services, industrial systems, and embedded product portfolios.
- Investigate cybersecurity defects, conduct root-cause analyses, and support corrective and preventive actions.
- Develop and deliver cybersecurity training and awareness programs for technical and business stakeholders.
- Develop, document, and continuously improve cybersecurity standards, procedures, technical controls, and best practices.
- Integrate cybersecurity requirements into product architectures, designs, and development processes.
- Support vulnerability disclosure, remediation planning, and product security incident response activities.
- Influence cybersecurity improvements across global teams and external partners.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
- 8–10 years of experience in the design, development, and testing of web-based, embedded, and/or connected systems.
- At least 4 years of hands-on experience in product or application cybersecurity engineering, architecture, risk assessment, or risk management.
- Hands-on experience with threat modeling, attack-surface analysis, vulnerability assessments, security testing, and related methodologies and tools.
- Experience applying frameworks, regulations, and standards such as IEC 62443, NIST 800-53, the NIST Cybersecurity Framework, or ISO/IEC 27001.
- Experience with secure product development processes and DevSecOps practices.
- Experience with security architecture and cryptographic technologies including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
- Industrial-sector experience in rail, transportation, mining, automotive, manufacturing, or critical infrastructure is preferred.
- Strong analytical, organizational, problem-solving, communication, presentation, stakeholder-management, collaboration, and prioritization skills.
- Ability to work independently and manage multiple priorities in a global, matrixed organization.
- Current knowledge of evolving cybersecurity threats, technologies, and industry trends.
Benefits
- Health, welfare, and retirement benefits are available.
- Annual bonus may be offered if eligible.
- The posted base salary range is $91000–129800.
- The role is part of a global, international, matrixed organization.