Vulnerability Management Specialist

Wabtec Careers; Contagem; On-site; BRL 180,000 - 300,000; Full time

Benefits offered by this job

Medical Assistance

Dental Assistance

Profit Sharing

Private Pension Plan

Meal Policy

Life Insurance

Employee Assistance Program

Mentorship Programs

Wellhub

Pharmacy Assistance

Job summary

A Wabtec Corp. procura um Senior Vulnerability Management Specialist para atuar presencialmente em Contagem, MG. O profissional fará parte da equipe de Product Cybersecurity e apoiará triagem de vulnerabilidades, resposta a incidentes, conformidade regulatória e melhoria contínua do PSIRT.

É necessário formação em Ciência da Computação/Engenharia, experiência em cybersecurity e certificações relevantes. Fluência em inglês é desejável, com interação internacional e relatórios de KPIs.

Qualifications

• Bacharelado em Ciência da Computação, Engenharia de Software, Cybersecurity ou área relacionada.
• Experiência em Cybersecurity e gestão de vulnerabilidades.
• Certificações como Security+, CySA+, e GCIH são desejáveis.
• Experiência com SDLC e frameworks de vulnerabilidade (CVSS, CVE, CWE).
• Conhecimento de normas de conformidade (NERC-CIP, ISO, NIST) e scripting (Python, PowerShell).

Responsibilities

• Executar atividades de gestão de vulnerabilidades e resposta a incidentes.
• Triar vulnerabilidades, documentar riscos e coordenar comunicações com equipes.
• Contribuir para melhoria do PSIRT e conformidade regulatória.
• Apoiar ferramentas de gestão de vulnerabilidades e geração de KPIs.
• Participar de plantões e fornecer atualizações de status à liderança.
• Colaborar com times de engenharia para remediação oportuna.

Skills

Cybersecurity

Vulnerability Mgmt

Python

PowerShell

SDLC

CVSS/CVE/CWE

NERC-CIP

ISO

NIST

English

Education

Bachelor's degree

Job description

Job Description

Essa posição é para atuar presencialmente em Contagem, MG.

Who will you be working with?

You will be working with the Product Cybersecurity Vulnerability Management team, collaborating closely with engineering, product management, cybersecurity, compliance, and business stakeholders across a global organization. This team is responsible for identifying, assessing, managing, and coordinating responses to cybersecurity vulnerabilities affecting Wabtec products while supporting regulatory compliance and product security resilience

How will you make a difference?

As a member of the Product Cybersecurity group, you will be responsible for executing vulnerability management and product security response activities across Wabtec's product portfolio. The Senior Vulnerability Management Specialist plays a critical role in protecting customers and products by identifying, evaluating, coordinating, and communicating security vulnerabilities and incidents.

In this role, you will support vulnerability triage, disclosure, incident response, and compliance activities while partnering with engineering teams to ensure timely remediation and adherence to cybersecurity policies. You will contribute to the continuous improvement of the Product Security Incident Response Team (PSIRT) program, support regulatory reporting obligations, and help strengthen the overall cybersecurity posture of Wabtec products.

What do we want to know about you?

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
• Experience in Cybersecurity.
• Cybersecurity certifications such as Security+, CySA+, and GCIH; advanced certifications are a plus.
• In-depth experience with vulnerability management.
• Strong experience with Secure Development Lifecycle (SDLC).
• Strong experience with common vulnerability frameworks, including CVSS, CVE, and CWE.
• Experience with cybersecurity compliance standards and regulations such as NERC-CIP, ISO, and NIST.
• Experience with scripting languages such as Python and PowerShell.
• Strong critical thinking and analytical problem-solving skills.
• Demonstrated ability to effectively manage multiple priorities while collaborating with stakeholders in a global organization.
• Demonstrated ability to respond to complex cybersecurity incidents in high-pressure, time-critical environments while maintaining effective communication and decision-making.
• Fluent English verbal and written communication skills.

What will your typical day look like?

• Participate in and respond to product vulnerability emergency response activities.
• Coordinate response activities and reporting for actively exploited product vulnerabilities in accordance with the EU Cyber Resilience Act (CRA) and applicable reporting obligations.
• Participate in a documented on-call rotation to ensure continuous product security incident detection and response coverage.
• Provide timely status updates to leadership during ongoing emergency response activities.
• Discover, assess, and document vulnerabilities reported through external researchers, penetration testing activities, and security scanning tools.
• Collaborate with engineering teams to triage vulnerabilities using industry-standard methodologies such as CVSS and determine overall product risk.
• Monitor remediation activities and support vulnerability disposition through evidence collection and adherence to product cybersecurity policies.
• Develop, maintain, and report cybersecurity KPIs and program metrics.
• Support the administration, usage, and adoption of vulnerability management tools.
• Develop and maintain operational documentation to improve readiness, resilience, and consistency of vulnerability management activities.
• Coordinate the vulnerability disclosure process in alignment with program policies and operational objectives.
• Coordinate the creation and publication of vulnerability advisories in partnership with engineering and business stakeholders.
• Support Product Security Incident Response Team (PSIRT) activities, including readiness reviews, tabletop exercises, and lessons learned initiatives.
• Drive continuous improvement efforts to enhance the maturity and effectiveness of the vulnerability management program.
• Perform other product cybersecurity-related responsibilities as required to support the growth and evolution of the program.
• You may also be asked to perform other duties outside of your function or trade, for which adequate training will be provided if necessary.

Benefits

At Wabtec, people come first. That’s why we ensure our employees feel valued and have the tools they need to thrive. By joining us, you will have access to a range of benefits designed to support your well-being and development. Here’s what we offer to make you feel part of a company that supports your professional and personal journey:

• Medical Assistance extended to dependents (spouse and children)
• Dental Assistance extended to dependents (spouse and children)
• Profit Sharing
• Private Pension Plan
• Meal Policy according to location
• Life Insurance
• Employee Assistance Program: psychological, legal, financial, and social support
• Headspace - mental health app
• Christmas Card or Basket for employees (based on location)
• Christmas Gift for children up to 11 years old
• Extended Maternity Leave
• Program for Pregnant Women and Babies
• Language Incentive Policy
• Mentorship Programs and access to training platform
• Wellhub
• Pharmacy Assistance

#LI-PROMOTEDJOBS

What could you accomplish in a place that puts People First?

At Wabtec, it’s not just about a job - it’s about the impact you make. When our people come together, we’re Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.

If you’re ready to revolutionize how the world moves for future generations, Wabtec is the place for you.

Who are we?

Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together – are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.

Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We’re lifelong learners, obsessed with better. Learn more at www.WabtecCorp.com.

Culture powers us and the possibilities.

We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We’re building a culture where leadership, inclusion and your unique perspective fuel progress.

We’re proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.

Need accommodation? Just let us know - we’ve got you.