Cybersecurity Engineer, Product Cybersecurity
Westinghouse Air Brake Technologies Corporation12 hours ago
Contagem, BrazilMid Level
Responsibilities
- Conduct cybersecurity reviews and assessments throughout the Software Development Lifecycle to verify compliance with standards and technical controls.
- Perform threat modeling, security analyses, and risk assessments to identify vulnerabilities, attack vectors, and product security gaps.
- Partner with engineering teams to recommend secure design principles, cybersecurity controls, and mitigation strategies.
- Support cybersecurity initiatives across web applications, connected products, industrial systems, and embedded platforms.
- Investigate cybersecurity defects, perform root cause analysis, and assist with remediation efforts.
- Contribute to vulnerability management, incident response activities, and security improvement initiatives.
- Develop and deliver cybersecurity training and awareness sessions for engineers, product managers, and business stakeholders.
- Create, maintain, and improve cybersecurity standards, procedures, and best practices.
- Collaborate with global teams to integrate cybersecurity requirements into product architectures and development processes.
- Promote a security-first mindset and drive continuous improvements in product cybersecurity.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
- Experience designing, developing, or testing web-based, embedded, connected, or industrial systems.
- Hands-on experience in product cybersecurity engineering, security architecture, risk assessment, or risk management.
- Strong knowledge of threat modeling, attack surface analysis, vulnerability assessment, and security testing methodologies.
- Experience with cybersecurity standards and frameworks such as IEC 62443, NIST 800-53, NIST CSF, ISO/IEC 27001, or similar.
- Familiarity with secure product development lifecycles and DevSecOps practices.
- Experience with security architecture and cryptographic technologies, including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
- Strong communication skills and the ability to influence technical decisions and collaborate with global, cross-functional teams.
- Experience in transportation, rail, mining, automotive, manufacturing, or critical infrastructure is highly valued.
- Current knowledge of evolving cybersecurity threats, technologies, and industry best practices.
Benefits
- Medical assistance extended to dependents.
- Dental assistance extended to dependents.
- Profit sharing.
- Private pension plan.
- Meal policy according to location.
- Life insurance.
- Employee Assistance Program with psychological, legal, financial, and social support.
- Headspace mental health app.
- Christmas card or basket for employees, based on location.
- Christmas gifts for children up to 11 years old.
- Extended maternity leave program for pregnant women and babies.
- Language incentive policy.
- Mentorship programs and access to a training platform.
- Wellhub.
- Pharmacy assistance.
Categories
About Westinghouse Air Brake Technologies Corporation
Westinghouse Air Brake Technologies Corporation (Wabtec) builds freight locomotives, braking and signaling systems, rail components, and software used by freight railroads, transit agencies, and industrial operators. The Pittsburgh-based public company (NYSE: WAB) sells original equipment, digital solutions, and aftermarket services worldwide; it combined with GE Transportation in 2019 and traces its roots to George Westinghouse’s 19th‑century air brake business. Its portfolio spans rolling stock, parts, condition‑monitoring, and train control platforms.