Product Cybersecurity Engineer: Threat Modeling & Design

Wabtec Corporation; Chicago (IL); Hybrid; USD 91,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Retirement plan

Annual bonus

Job summary

Wabtec Corporation is seeking a Cybersecurity Engineer to assess product cybersecurity across the SDLC and advise product managers and engineering teams on standards and controls. The role emphasizes threat modeling, secure design, and risk reduction for web and embedded systems.

The candidate will work with global teams, communicate complex concepts to non-technical stakeholders, and help implement cybersecurity controls and best practices across product portfolios.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 8–10 years of experience in the design, development, and testing of web-based, embedded, and/or connected systems.
• 4+ years of hands-on experience in product/application cybersecurity engineering, architecture, risk assessment, or risk management.
• Experience with security risk assessment methodologies, threat modeling, vulnerability assessments, and security testing.
• Experience applying cybersecurity frameworks and standards (IEC 62443, NIST CSF, NIST 800‑53, ISO/IEC 27001).
• Experience in industrial sectors such as rail, transportation, mining, automotive, manufacturing, or critical infrastructure is preferred.
• Experience with secure product development processes and DevSecOps practices.
• Experience in security architecture and cryptographic technologies.

Responsibilities

• Conduct cybersecurity reviews and assessments of Wabtec products throughout the SDLC.
• Partner with engineering teams for threat modeling, risk assessments, and security analyses.
• Provide guidance on cybersecurity principles and risk management to engineers, leadership, and stakeholders.
• Support cybersecurity consulting across connected products, web service, and embedded portfolios.
• Recommend secure design principles and risk mitigation measures to reduce attack-surface.
• Assist in investigating cybersecurity defects and root cause analyses.
• Develop and deliver cybersecurity training and awareness programs.

Skills

Threat modeling

Security analyses

Communication

Stakeholder mgmt

Education

Bachelor's degree in Computer Science or related field

Tools

Security testing tools

Job description

Wabtec Corporation is seeking a Cybersecurity Engineer to assess product cybersecurity across the SDLC and advise product managers and engineering teams on standards and controls. The role emphasizes threat modeling, secure design, and risk reduction for web and embedded systems.

The candidate will work with global teams, communicate complex concepts to non-technical stakeholders, and help implement cybersecurity controls and best practices across product portfolios.