Product Cybersecurity Engineer: Threat Modeling

Wabtec; Cedar Rapids (IA); On-site; USD 91,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Retirement plan

Annual bonus

Job summary

Wabtec is seeking a Cybersecurity Engineer to assess product security across the SDLC, advising engineers and product managers on controls and best practices. You will work with teams to address external standards and internal policies, promoting secure design and risk mitigation across a broad portfolio of connected products.

The role emphasizes threat modeling, security architecture reviews, embedded/IoT security, and cybersecurity compliance, with strong collaboration across global teams and

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 8–10 years in design, development and testing of web/embedded/connected systems.
• 4+ years in product/app cybersecurity engineering, architecture, risk assessment, or risk management.
• Experience with threat modeling, attack surface analysis, vulnerability assessments, and security testing.

Responsibilities

• Perform cybersecurity reviews across the SDLC for Wabtec products.
• Conduct threat modeling, risk assessments, and security analyses.
• Provide guidance on cybersecurity principles and risk management to engineers and leaders.
• Support vulnerability disclosure, remediation planning, and incident response.

Skills

Threat modeling

Security architecture

Risk assessment

Cybersecurity frameworks

Embedded/IoT security

DevSecOps

Cryptography

Communication skills

Independent work

Global collaboration

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

PKI

Secure boot

Key management

Certificate lifecycle management

Job description

Wabtec is seeking a Cybersecurity Engineer to assess product security across the SDLC, advising engineers and product managers on controls and best practices. You will work with teams to address external standards and internal policies, promoting secure design and risk mitigation across a broad portfolio of connected products.

The role emphasizes threat modeling, security architecture reviews, embedded/IoT security, and cybersecurity compliance, with strong collaboration across global teams and