Cybersecurity Engineer, Product Cybersecurity

SmartRecruiters, Inc.; Contagem; On-site; BRL 180,000 - 260,000; Full time

Benefits offered by this job

Medical and dental coverage for depend

Profit sharing

Employee Assistance Program (EAP)

Headspace mental health app

Extended maternity leave

Language incentive policy

Mentorship programs

Job summary

Wabtec seeks a Cybersecurity Engineer to strengthen product security across software, embedded and industrial platforms. You will conduct SDLC security reviews, perform threat modeling, and guide engineering teams on secure design principles and mitigations.

You will collaborate with product managers, engineers, and cybersecurity professionals worldwide to reduce attack surfaces and improve cybersecurity maturity across products.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Experience designing, developing, or testing web-based, embedded, connected, or industrial systems.
• Hands-on experience in product cybersecurity engineering, security architecture, risk assessment, or risk management.
• Strong knowledge of threat modeling, attack surface analysis, vulnerability assessment, and security testing methodologies.
• Experience with standards such as IEC 62443, NIST 800-53, NIST CSF, ISO/IEC 27001.
• Familiarity with secure product development lifecycles and DevSecOps practices.
• Experience with security architecture and cryptographic technologies, including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
• Strong communication skills and ability to influence technical decisions.
• Experience in industrial sectors like transportation, rail, mining, automotive, manufacturing, or critical infrastructure.
• Current knowledge of evolving cybersecurity threats and best practices.

Responsibilities

• Conduct cybersecurity reviews and assessments throughout the Software Development Lifecycle (SDLC).
• Perform threat modeling, security analyses, and risk assessments to identify vulnerabilities and product security gaps.
• Partner with engineering teams to recommend secure design principles, cybersecurity controls, and mitigation strategies.
• Support cybersecurity initiatives across web applications, connected products, industrial systems, and embedded platforms.
• Investigate cybersecurity defects, perform root cause analysis, and assist with remediation efforts.
• Contribute to vulnerability management, incident response activities, and security improvement initiatives.
• Develop and deliver cybersecurity training and awareness sessions for engineers, product managers, and business stakeholders.
• Create, maintain, and improve cybersecurity standards, procedures, and best practices.
• Collaborate with global teams to integrate cybersecurity requirements into product architectures and development processes.

Skills

Threat modeling

Attack surface analysis

Vulnerability assessment

Security testing methodologies

DevSecOps practices

Security architecture

Cryptographic technologies

PKI

Secure boot

Key management

Certificate lifecycle management

Secure communications

Communication skills

Cross-functional collaboration

Industrial cybersecurity

Education

Bachelor's degree in Computer Science, Cybersecurity, or a related field

Job description

Cybersecurity Engineer, Product Cybersecurity

• Full-time
• Job Family: Product Cyber Security Engineering

Who will you be working with?

You will work closely with Product Managers, Software and Systems Engineering teams, Technical Leaders, and Cybersecurity professionals across Wabtec's global organization. This role partners with cross-functional stakeholders to ensure cybersecurity requirements are integrated into connected products, web services, industrial systems, and embedded solutions throughout the product lifecycle.

How will you make a difference?

As a Cybersecurity Engineer, you will help strengthen the security posture of Wabtec products by conducting cybersecurity assessments, identifying risks and vulnerabilities, and guiding engineering teams on secure product development practices. You will play a key role in ensuring compliance with cybersecurity standards and frameworks, reducing product attack surfaces, and improving overall cybersecurity maturity across the organization.

What do we want to know about you?

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Experience designing, developing, or testing web-based, embedded, connected, or industrial systems.
• Hands-on experience in product cybersecurity engineering, security architecture, risk assessment, or risk management.
• Strong knowledge of threat modeling, attack surface analysis, vulnerability assessment, and security testing methodologies.
• Experience working with cybersecurity standards and frameworks such as IEC 62443, NIST 800-53, NIST CSF, ISO/IEC 27001, or similar.
• Familiarity with secure product development lifecycles and DevSecOps practices.
• Experience with security architecture and cryptographic technologies, including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
• Strong communication skills with the ability to influence technical decisions and collaborate with global, cross-functional teams.
• Experience in industrial sectors such as transportation, rail, mining, automotive, manufacturing, or critical infrastructure is highly valued.
• Current knowledge of evolving cybersecurity threats, technologies, and industry best practices.

What will your typical day look like?

• Conduct cybersecurity reviews and assessments throughout the Software Development Lifecycle (SDLC) to verify compliance with Wabtec standards and technical controls.
• Perform threat modeling, security analyses, and risk assessments to identify vulnerabilities, attack vectors, and product security gaps.
• Partner with engineering teams to recommend secure design principles, cybersecurity controls, and mitigation strategies.
• Support cybersecurity initiatives across web applications, connected products, industrial systems, and embedded platforms.
• Investigate cybersecurity defects, perform root cause analysis, and assist with remediation efforts.
• Contribute to vulnerability management, incident response activities, and security improvement initiatives.
• Develop and deliver cybersecurity training and awareness sessions for engineers, product managers, and business stakeholders.
• Create, maintain, and improve cybersecurity standards, procedures, and best practices.
• Collaborate with global teams to integrate cybersecurity requirements into product architectures and development processes.

Promote a security-first mindset and drive continuous improvements in product cybersecurity across the organization.

Benefits
At Wabtec, people come first. That's why we ensure our employees feel valued and have the tools they need to thrive. By joining us, you will have access to a range of benefits designed to support your well-being and development. Here's what we offer to make you feel part of a company that supports your professional and personal journey:

• Medical Assistance extended to dependents (spouse and children)
• Dental Assistance extended to dependents (spouse and children)
• Profit Sharing
• Meal Policy according to location
• Life Insurance
• Employee Assistance Program: psychological, legal, financial, and social support
• Headspace - mental health app
• Christmas Card or Basket for employees (based on location)
• Christmas Gift for children up to 11 years old
• Extended Maternity Leave
• Program for Pregnant Women and Babies
• Language Incentive Policy
• Mentorship Programs and access to training platform
• Pharmacy Assistance

What could you accomplish in a place that puts People First?

At Wabtec, it’s not just about a job - it’s about the impact you make. When our people come together, we're Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.

If you're ready to revolutionize how the world moves for future generations, Wabtec is the place for you.

Who are we?

Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together - are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.

Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We're lifelong learners, obsessed with better. Learn more at www.WabtecCorp.com.

Culture powers us and the possibilities.

We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We're building a culture where leadership, inclusion and your unique perspective fuel progress.

We're proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.

Need accommodation? Just let us know - we've got you.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply