Product Cybersecurity Engineer: Threat Modeling & Secure Design

SmartRecruiters, Inc.; Cedar Rapids (IA); On-site; USD 91,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Retirement plan

Annual bonus

Job summary

Wabtec is seeking a Cybersecurity Engineer for Product Cybersecurity Engineering to assess and enhance cybersecurity of products throughout the Software Development Lifecycle. You will collaborate with product managers and engineering to implement standards, controls, and best practices.

The role requires strong expertise across web and embedded systems, threat modeling, and risk management, with experience in industrial sectors and secure product development processes.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 8–10 years of experience in design, development, and testing of web-based, embedded, and/or connected systems.
• 4+ years of hands-on experience in product/application cybersecurity engineering, architecture, risk assessment, or risk management.
• Experience with security risk assessment methodologies, threat modeling, attack surface analysis, vulnerability assessments, and security testing.
• Experience applying cybersecurity frameworks and standards (IEC 62443, NIST 800-53, CSF, ISO/IEC 27001).
• Experience in industrial sectors such as rail, transportation, mining, automotive, manufacturing, or critical infrastructure is preferred.
• Experience with secure product development processes and DevSecOps practices.
• Experience in security architecture and implementing cryptographic technologies (PKI, secure boot, key management, certificate lifecycle, secure communications).
• Ability to work independently and manage multiple priorities in a global, matrixed organization.
• Strong analytical, organizational, and problem-solving skills.
• Excellent verbal, written, presentation, and stakeholder management skills.
• Ability to influence technical decisions and drive cybersecurity improvements across global teams.

Responsibilities

• Conduct cybersecurity reviews and assessments of products across the SDLC, ensuring compliance with policies, standards, and controls.
• Partner with engineering to perform threat modeling, risk assessments, and security analyses to identify vulnerabilities.
• Provide guidance on cybersecurity principles, technologies, and risk management to technical and non-technical stakeholders.
• Support cybersecurity consulting across connected products, web services, industrial systems, and embedded portfolios.
• Recommend secure design principles and risk mitigation to reduce attack surface while maintaining maintainability.
• Assist engineering in investigating cybersecurity defects and implementing corrective actions.
• Develop and deliver cybersecurity training and awareness programs for engineers and stakeholders.
• Contribute to development and continuous improvement of standards, controls, and best practices.
• Promote cybersecurity best practices to improve product security maturity across the organization.

Skills

Threat modeling

Security architecture

DevSecOps

Cryptography

Embedded systems

Education

Bachelor's degree in Computer Science/Cybersecurity

Tools

PKI

Job description

Wabtec is seeking a Cybersecurity Engineer for Product Cybersecurity Engineering to assess and enhance cybersecurity of products throughout the Software Development Lifecycle. You will collaborate with product managers and engineering to implement standards, controls, and best practices.

The role requires strong expertise across web and embedded systems, threat modeling, and risk management, with experience in industrial sectors and secure product development processes.