Product Cybersecurity Engineer: Threat Modeling

Wabtec Corporation; Melbourne, Northern (FL, KY); Hybrid; USD 91,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Annual bonus

Job summary

Wabtec Corporation is seeking a Cybersecurity Engineer to perform ongoing assessments of products, ensuring alignment with Wabtec cybersecurity standards and controls. You will guide product managers and engineering teams, promote awareness of standards, and advise on best practices across our product portfolio.

You will work with cross‑functional teams to define and maintain technical controls addressing external standards and product requirements, while supporting SDLC security reviews and

Qualifications

• Bachelor's degree and 8–10 years in design, development, and testing of web-based/embedded systems.
• 4+ years in product/application cybersecurity engineering, architecture, or risk management.
• Experience with risk assessment methodologies, threat modeling, vulnerability assessments, and security testing.
• Familiarity with IEC 62443, NIST 800-53, CSF, ISO/IEC 27001 or equivalent.
• Experience in industrial sectors such as rail, transportation, mining, and manufacturing.

Responsibilities

• Conduct cybersecurity reviews across SDLC evaluating compliance with policies and controls.
• Perform threat modeling, risk assessments, and security analyses with engineering teams.
• Provide guidance on cybersecurity principles and risk management to technical and non-technical stakeholders.
• Support cybersecurity consulting across connected products, web services, and embedded systems.
• Recommend secure design principles and risk mitigation while maintaining maintainability.
• Investigate defects, perform root cause analyses, and drive corrective actions.
• Develop and deliver cybersecurity training for engineers, leaders, and stakeholders.
• Contribute to standards, procedures, and best practices; promote cybersecurity maturity.

Skills

Cybersecurity engineering

Threat modeling

Security analyses

Vulnerability assessments

DevSecOps

Secure design principles

Cryptography (PKI/secure boot)

Education

Bachelor's degree in Computer Science or Cybersecurity

Job description

Wabtec Corporation is seeking a Cybersecurity Engineer to perform ongoing assessments of products, ensuring alignment with Wabtec cybersecurity standards and controls. You will guide product managers and engineering teams, promote awareness of standards, and advise on best practices across our product portfolio.

You will work with cross‑functional teams to define and maintain technical controls addressing external standards and product requirements, while supporting SDLC security reviews and