Staff Product Security Specialist

Wabtec; Contagem; Presencial; BRL 180 000 - 300 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical Assistance

Private Pension Plan

Meal Policy

Life Insurance

Employee Assistance Program

Language Incentive Policy

Mentorship Programs

Wellhub

Pharmacy Assistance

Resumo da oferta

A Wabtec está buscando um Staff PSIRT Specialist para atuar presencialmente em Contagem, MG. Você liderará atividades de resposta a vulnerabilidades de produtos no PSIRT, coordenando equipes globais e stakeholders para mitigar riscos e cumprir obrigações regulatórias.

O papel envolve manter rotinas de plantão, facilitar war rooms, produzir comunicados de segurança e conduzir exercícios de prontidão, com foco em melhoria contínua e disclosure responsável.

Qualificações

• Formação em ciência da computação, engenharia de software, cibersegurança ou área relacionada.
• Experiência comprovada em cibersegurança.
• Certificações avançadas em cibersegurança (CISSP, CISM, GCIH, GCIL).
• Experiência em gestão de vulnerabilidades de produtos.
• Pensamento crítico avançado.
• Experiência com o ciclo de vida de desenvolvimento seguro.
• Conformidade com normas e regulamentações (NERC-CIP, ISO, NIST).
• Experiência com padrões de vulnerabilidade (CVSS, CVE, CWE).
• Capacidade de gerenciar várias tarefas com stakeholders globais.
• Capacidade de coordenar equipes remotas/virtuais.
• Capacidade de liderar e coordenar respostas de incidentes de cibersegurança em ambientes de alta pressão.
• Habilidades avançadas de comunicação em inglês (falado e escrito).

Responsabilidades

• Liderar resposta PSIRT e coordenação de stakeholders para vulnerabilidades de produtos.
• Coordinar resposta e reporte de vulnerabilidades ativamente exploradas conforme CRA.
• Manter e participar de rotação de plantão para detecção e resposta a segurança de produtos.
• Colaborar com a Segurança da Informação da empresa na preparação e execução de atividades de resposta de emergência.
• Facilitar wors rooms conforme necessário para triagem de vulnerabilidades.
• Liderar atualizações à gestão, coordenando demandas de escalonamento.
• Liderar desenvolvimento e distribuição de avisos de segurança e notificações.
• Conduzir exercícios de prontidão, checklists e engajamento de stakeholders.
• Conduzir lições aprendidas e ações pós-incidente.
• Conduzir análise de ameaças com base em vulnerabilidades e inteligência.
• Preparar relatórios e apresentações para liderança técnica e de negócios.
• Liderar apresentação de KPIs e métricas.
• Impulsionar melhoria contínua do programa.
• Apoiar o processo de disclosure de vulnerabilidades.

Conhecimentos

Bacharelado em ciência da computação,

Experiência em cibersegurança

Certificações em cibersegurança

Gestão de vulnerabilidades de produtos

Pensamento crítico

Ciclo de vida seguro

Conformidade/regulamentação

Padrões de vulnerabilidade

Coordenação com stakeholders globais

Coordenação de equipes remotas

Liderança em resposta a incidentes

Inglês avançado

Formação académica

Bacharelado em ciência da computação, engenharia de software, cibersegurança ou área relacionada

Descrição da oferta de emprego

Essa posição é para atuar presencialmente em Contagem, MG.

Who will you be working with?

In this role, you will work as part of the Product Security Incident Response Team (PSIRT).

How will you make a difference?

The Staff PSIRT Specialist is responsible for leading emergency response activities.

What do we want to know about you?

• Bachelor’s degree in computer science, software engineering, cybersecurity, or a related field.
• Proven experience in cybersecurity.
• Advanced cybersecurity certifications (CISSP, CISM, GCIH, GCIL).
• Experience with product vulnerability management.
• Strong critical thinking skills
• Experience with the secure development lifecycle
• Experience with compliance standards & regulations (NERC-CIP, ISO, NIST)
• Advanced experience with common vulnerability frameworks (CVSS, CVE, CWE).
• Demonstrated ability to effectively manage multiple tasks, working with various stakeholders in a global organization.
• Demonstrated ability to effectively coordinate remote/virtual teams to achieve business outcomes
• Demonstrated ability to lead and coordinate complex cybersecurity incident response activities in high-pressure, time-critical environments, maintaining clear decision-making, effective communication, and prioritization under stress.
• Advanced English verbal and written communication skills.

What will your typical day look like?

• Lead PSIRT response and coordination of stakeholders to product vulnerability vulnerabilities.
• Coordinate response to and reporting of actively exploited product vulnerabilities in accordance with EU’s Cyber Resilience Act (CRA) and the rapid reporting obligations.
• Maintain and participate in a documented on-call rotation to ensure continuous coverage for product security incident detection and response, including adherence to defined response procedures, escalation protocols, and audit requirements.
• Collaborate with Enterprise Information Security in preparation and execution of emergency response activities.
• Facilitate “war rooms” as required for vulnerability triaging and emergency response activities.
• Lead updates to management, coordinating escalation demands as necessary during on-going emergency response activities.
• Lead the development and distribution of security advisories and notifications across the organization.
• Conduct response readiness activities such as tabletop exercises, monitoring through readiness checklists, and stakeholder engagement to ensure organizational readiness.
• Lead lessons learned and after-action activities.
• Conduct threat analysis based on vulnerability characteristics and threat intelligence.
• Prepare reports and presentations communicating risks and status to a diverse audience of technical and business leadership.
• Lead the presentation and communication of key performance indicators (KPIs) and metrics.
• Actively drives continuous improvement and growth of the program.
• Support the vulnerability disclosure process.

Benefits

At Wabtec, people come first. That’s why we ensure our employees feel valued and have the tools they need to thrive. By joining us, you will have access to a range of benefits designed to support your well‑being and development. Here’s what we offer to make you feel part of a company that supports your professional and personal journey:

• Medical Assistance extended to dependents (spouse and children)
• Dental Assistance extended to dependents (spouse and children)
• Profit Sharing
• Private Pension Plan
• Meal Policy according to location
• Life Insurance
• Employee Assistance Program: psychological, legal, financial, and social support
• Headspace – mental health app
• Christmas Card or Basket for employees (based on location)
• Christmas Gift for children up to 11 years old
• Extended Maternity Leave
• Program for Pregnant Women and Babies
• Language Incentive Policy
• Mentorship Programs and access to training platform
• Wellhub
• Pharmacy Assistance

What could you accomplish in a place that puts People First?

At Wabtec, it’s not just about a job - it’s about the impact you make. When our people come together, we’re Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.

If you’re ready to revolutionize how the world moves for future generations, Wabtec is the place for you.

Who are we?

Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together – are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.

Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We’re lifelong learners, obsessed with better. Learn more at www.WabtecCorp.com.

Culture powers us and the possibilities.

We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We’re building a culture where leadership, inclusion and your unique perspective fuel progress.

We’re proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.

Need accommodation? Just let us know - we’ve got you.