Cybersecurity Engineer, Product Cybersecurity

Wabtec Corporation; Contagem; On-site; BRL 150,000 - 230,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Profit sharing

Private pension

Meal policy

Life insurance

Employee assistance program

Wellhub

Pharmacy assistance

Job summary

Wabtec is seeking a Cybersecurity Engineer to strengthen product security across software, embedded, and industrial systems. You will conduct assessments, identify risks, and guide engineering teams on secure development practices.

Role requires knowledge of threat modeling, risk assessment, and relevant standards (IEC 62443, NIST CSF, ISO 27001). Collaboration with global teams is essential for secure product architectures.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Experience designing, developing, or testing web-based, embedded, connected, or industrial systems.
• Hands-on experience in product cybersecurity engineering, security architecture, risk assessment, or risk management.
• Strong knowledge of threat modeling and vulnerability assessment techniques.
• Familiarity with cybersecurity standards and frameworks such as IEC 62443, NIST 800-53, NIST CSF, ISO/IEC 27001.
• Experience with secure product development lifecycles and DevSecOps practices.

Responsibilities

• Conduct cybersecurity reviews across the Software Development Lifecycle (SDLC).
• Perform threat modeling, security analyses, and risk assessments to identify vulnerabilities and gaps.
• Partner with engineering teams to implement secure design principles and cybersecurity controls.
• Support cybersecurity initiatives across web applications, embedded platforms, and industrial systems.
• Investigate cybersecurity defects, perform root cause analysis, and assist with remediation.

Skills

Cybersecurity engineering

Security architecture

Threat modeling

Vulnerability assessment

Security testing

DevSecOps

PKI & crypto

Communication skills

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

IEC 62443

NIST CSF

ISO/IEC 27001

Job description

Job Description

Who will you be working with?

You will work closely with Product Managers, Software and Systems Engineering teams, Technical Leaders, and Cybersecurity professionals across Wabtec's global organization. This role partners with cross-functional stakeholders to ensure cybersecurity requirements are integrated into connected products, web services, industrial systems, and embedded solutions throughout the product lifecycle.

How will you make a difference?

As a Cybersecurity Engineer, you will help strengthen the security posture of Wabtec products by conducting cybersecurity assessments, identifying risks and vulnerabilities, and guiding engineering teams on secure product development practices. You will play a key role in ensuring compliance with cybersecurity standards and frameworks, reducing product attack surfaces, and improving overall cybersecurity maturity across the organization.

What do we want to know about you?

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Experience designing, developing, or testing web-based, embedded, connected, or industrial systems.
• Hands‑on experience in product cybersecurity engineering, security architecture, risk assessment, or risk management.
• Strong knowledge of threat modeling, attack surface analysis, vulnerability assessment, and security testing methodologies.
• Experience working with cybersecurity standards and frameworks such as IEC 62443, NIST 800-53, NIST CSF, ISO/IEC 27001, or similar.
• Familiarity with secure product development lifecycles and DevSecOps practices.
• Experience with security architecture and cryptographic technologies, including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
• Strong communication skills with the ability to influence technical decisions and collaborate with global, cross‑functional teams.
• Experience in industrial sectors such as transportation, rail, mining, automotive, manufacturing, or critical infrastructure is highly valued.
• Current knowledge of evolving cybersecurity threats, technologies, and industry best practices.

What will your typical day look like?

• Conduct cybersecurity reviews and assessments throughout the Software Development Lifecycle (SDLC) to verify compliance with Wabtec standards and technical controls.
• Perform threat modeling, security analyses, and risk assessments to identify vulnerabilities, attack vectors, and product security gaps.
• Partner with engineering teams to recommend secure design principles, cybersecurity controls, and mitigation strategies.
• Support cybersecurity initiatives across web applications, connected products, industrial systems, and embedded platforms.
• Investigate cybersecurity defects, perform root cause analysis, and assist with remediation efforts.
• Contribute to vulnerability management, incident response activities, and security improvement initiatives.
• Develop and deliver cybersecurity training and awareness sessions for engineers, product managers, and business stakeholders.
• Create, maintain, and improve cybersecurity standards, procedures, and best practices.
• Collaborate with global teams to integrate cybersecurity requirements into product architectures and development processes.
• Promote a security‑first mindset and drive continuous improvements in product cybersecurity across the organization.

Benefits

• Medical Assistance extended to dependents (spouse and children)
• Dental Assistance extended to dependents (spouse and children)
• Profit Sharing
• Private Pension Plan
• Meal Policy according to location
• Life Insurance
• Employee Assistance Program: psychological, legal, financial, and social support
• Headspace - mental health app
• Christmas Card or Basket for employees (based on location)
• Christmas Gift for children up to 11 years old
• Extended Maternity Leave
• Program for Pregnant Women and Babies
• Language Incentive Policy
• Mentorship Programs and access to training platform
• Wellhub
• Pharmacy Assistance

Additional Information

What could you accomplish in a place that puts People First? At Wabtec, it's not just about a job - it's about the impact you make. When our people come together, we're Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.

If you're ready to revolutionize how the world moves for future generations, Wabtec is the place for you.

Who are we?

Wabtec is a leading global provider of equipment, systems, digital solutions, and value‑added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it's freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together - are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.

Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We're lifelong learners, obsessed with better. Learn more at powers us and the possibilities.

We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We're building a culture where leadership, inclusion and your unique perspective fuel progress.

We're proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.

Need accommodation? Just let us know - we've got you.