Product Cybersecurity Engineer – Threat Modeling

Wabtec Corporation; Cedar Rapids (IA); Hybrid; USD 91,000 - 130,000; Full time

Benefits offered by this job

Annual bonus

Health/welfare benefits

Job summary

Wabtec Corporation is seeking a Cybersecurity Engineer to drive product cybersecurity across web, embedded, and connected systems. You will perform threat modeling, risk assessments, and security analyses, guiding engineering teams and leadership on secure design principles and best practices.

The role emphasizes SDLC reviews, vulnerability identification, cryptographic implementations, and collaboration with global teams to improve product security maturity and incident response readiness.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 8–10 years of experience in the design, development, and testing of web-based, embedded, and/or connected systems.
• 4+ years of hands‑on experience in product/application cybersecurity engineering, architecture, risk assessment, or risk management.
• Experience applying cybersecurity frameworks, regulations, and standards such as IEC 62443, NIST 800‑53, NIST CSF, ISO/IEC 27001, or equivalent.

Responsibilities

• Conduct cybersecurity reviews and assessments of Wabtec products throughout the SDLC, evaluating compliance with policies, standards and controls.
• Partner with engineering teams to perform threat modeling and risk assessments to identify vulnerabilities and attack surfaces.
• Provide guidance on cybersecurity principles and risk management to engineering teams and leadership.
• Support cybersecurity consulting across Wabtec's connected products, web service, industrial systems and embedded product portfolios.
• Develop secure design principles, controls, and hardening strategies to reduce attack-surface while maintaining usability.

Skills

Cybersecurity engineering

Threat modeling

Security risk assessment

Security frameworks

Communication with stakeholders

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

PKI

Secure boot

Key management

Certificate lifecycle management

Secure communications

Job description

Wabtec Corporation is seeking a Cybersecurity Engineer to drive product cybersecurity across web, embedded, and connected systems. You will perform threat modeling, risk assessments, and security analyses, guiding engineering teams and leadership on secure design principles and best practices.

The role emphasizes SDLC reviews, vulnerability identification, cryptographic implementations, and collaboration with global teams to improve product security maturity and incident response readiness.