Product Cybersecurity Engineer: Threat Modeling & Design

Wabtec; Pittsburgh (Allegheny County); On-site; USD 91,000 - 130,000; Full time

Benefits offered by this job

Annual bonus

Job summary

Wabtec seeks a Cybersecurity Engineer for Product Cybersecurity to lead ongoing product assessments and ensure alignment with Wabtec standards across the lifecycle.

You will collaborate with engineering teams on threat modeling, risk assessments, secure design, and incident response, promoting best practices and maturing cybersecurity across the organization.

This role focuses on embedded/web security, DevSecOps, PKI, secure boot, and cryptographic controls in industrial contexts.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 8–10 years of experience in design, development, and testing of web-based, embedded, and/or connected systems.
• 4+ years of hands-on experience in product/application cybersecurity engineering, architecture, risk assessment, or risk management.
• Hands-on experience with security risk assessment methodologies, threat modeling, attack surface analysis, vulnerability assessments, and security testing.
• Experience applying cybersecurity frameworks and standards such as IEC 62443, NIST 800-53, CSF, ISO/IEC 27001, or equivalent.

Responsibilities

• Conduct cybersecurity reviews and assessments of Wabtec products throughout the SDLC, evaluating compliance with policies, standards, and technical controls.
• Partner with engineering teams to perform threat modeling, risk assessments, and security analyses to identify vulnerabilities and attack surface.
• Provide expert guidance on cybersecurity principles, technologies, and risk management to engineers, leadership, and stakeholders.
• Support cybersecurity consulting across connected products, web services, industrial systems and embedded portfolios.
• Recommend secure design principles, software security controls, hardening strategies, and risk mitigation measures.

Skills

Threat modelling

Risk assessment

Security analyses

Cryptography

PKI & secure boot

DevSecOps

Secure SDLC

Stakeholder comms

Vulnerability disclosure

Education

Bachelor's degree in CS/Cybersecurity

Job description

Wabtec seeks a Cybersecurity Engineer for Product Cybersecurity to lead ongoing product assessments and ensure alignment with Wabtec standards across the lifecycle.

You will collaborate with engineering teams on threat modeling, risk assessments, secure design, and incident response, promoting best practices and maturing cybersecurity across the organization.

This role focuses on embedded/web security, DevSecOps, PKI, secure boot, and cryptographic controls in industrial contexts.