Cybersecurity Engineer - Product Cybersecurity

Wabtec; Bengaluru; On-site; INR 2,600,000 - 4,600,000; Full time

Job summary

Wabtec in Bengaluru seeks a seasoned Cybersecurity Engineer to lead ongoing assessments of products, ensuring alignment with cybersecurity standards and controls. You will advise product managers and engineering teams, promote secure design practices, and help scale security maturity across the portfolio.

You will collaborate across SDLC with engineering, product management, and leadership, perform threat modeling and risk analyses, and drive corrective actions to strengthen defenses while

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 8–10 years of experience in design, development, and testing of web-based, embedded, and connected systems.
• 4+ years in product/application cybersecurity engineering, architecture, or risk management.
• Experience with security risk assessment methodologies, threat modeling, vulnerability assessments, and security testing.
• Experience applying IEC 62443, NIST CSF, ISO/IEC 27001, or equivalent frameworks.
• Experience in industrial sectors (rail, transportation, mining, automotive, manufacturing, critical infrastructure) preferred.
• Experience with secure product development processes and DevSecOps practices.
• Knowledge of cryptographic technologies including PKI, secure boot, and key management.
• Ability to manage multiple priorities in a global, matrixed organization.
• Strong analytical, organizational, and stakeholder management skills.

Responsibilities

• Conduct cybersecurity reviews and assessments across the SDLC to ensure compliance with Wabtec standards.
• Partner with engineering teams for threat modeling, risk assessments, and security analyses to identify vulnerabilities.
• Advise on cybersecurity principles and risk management to engineers and leadership.
• Support cybersecurity consulting across connected products, web services, and embedded systems.
• Recommend secure design principles and security controls to reduce attack surface.
• Investigate cybersecurity defects and drive corrective actions and preventive measures.
• Develop and deliver cybersecurity training and awareness programs for engineers and managers.
• Contribute to the development and continuous improvement of cybersecurity standards and procedures.
• Promote cybersecurity best practices across the organization to improve product security maturity.
• Collaborate with product teams to embed cybersecurity requirements in architectures and development processes.
• Support vulnerability disclosure, remediation planning, and incident response activities.

Skills

Threat modeling

Risk assessment

Security testing

Product security engineering

DevSecOps

Cybersecurity standards

Communicate security

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

PKI

Secure boot

Key management

Certificate lifecycle mgmt

Secure communications

Job description

Job Summary

The Cybersecurity Engineer is responsible for ongoing cybersecurity assessments of Wabtec products to determine whether they comply with applicable Wabtec cybersecurity standards and technical controls. They will advise product managers and engineering teams, create awareness of cybersecurity standards and technical controls, and recommend best practices for satisfying these standards and controls for all Wabtec products offered or made available for customers. They will work closely with others to define and maintain technical controls to address external standards, Wabtec standards, and product requirements.

Responsibilities

• Conduct cybersecurity reviews and assessments of Wabtec products throughout the Software Development Lifecycle (SDLC), evaluating compliance with Wabtec policies, standards, and technical controls.
• Partner with engineering teams to perform threat modeling, threat and risk assessments, and security analyses to identify vulnerabilities, attack vectors, and product threat surface
• Provide expert guidance on cybersecurity principles, technologies, and risk management, clearly communicating technical concepts to engineering teams, leadership, and non-technical stakeholders.
• Support cybersecurity consulting activities across Wabtec's connected products, web service, industrial systems and embedded product portfolios.
• Recommend secure design principles, software security controls, hardening strategies, and risk mitigation measures that reduce attack-surface while ensuring maintainability and operational efficiency.
• Support engineering teams in investigating cybersecurity defects, performing root cause analyses, and implementing corrective and preventive actions.
• Develop and deliver cybersecurity training and awareness programs for engineers, technical leaders, product managers, and business stakeholders.
• Contribute to the development, documentation, and continuous improvement of cybersecurity standards, procedures, technical controls, and best practices.
• Promote and share cybersecurity best practices across the organization to improve product security maturity and consistency.
• Collaborate with product development teams to integrate cybersecurity requirements into product architectures, designs, and development processes.
• Support vulnerability disclosure, remediation planning, and security incident response activities related to product cybersecurity.
• Perform other duties and special projects as assigned.

Minimum Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 8-10 years of experience in the design, development, and testing of web-based, embedded, and/or connected systems.
• 4+ years of hands-on experience in product/application cybersecurity engineering, architecture, risk assessment, or risk management.
• Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
• Experience applying cybersecurity frameworks, regulations, and standards such as IEC 62443, NIST 800-53, NIST Cybersecurity Framework (CSF), ISO/IEC 27001, or equivalent.
• Experience in industrial sectors such as rail, transportation, mining, automotive, manufacturing, or critical infrastructure is preferred.
• Experience with secure product development processes and DevSecOps practices.
• Experience in security architecture and implementing cryptographic technologies, including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
• Ability to work independently and effectively manage multiple priorities in a global, matrixed organization.
• Strong analytical, organizational, and problem-solving skills.
• Excellent verbal, written, presentation, and stakeholder management skills.
• Ability to manage multiple tasks while collaborating with diverse stakeholders in an international environment.
• Proven ability to influence technical decisions and drive cybersecurity improvements across global teams and external partners.
• Strong collaboration skills with engineering, product management, customers, suppliers, and leadership teams.
• Demonstrated commitment to continuous improvement, operational excellence, and cybersecurity maturity.
• Current knowledge of evolving cybersecurity threats, technologies, and industry trends