Product Cybersecurity Engineer: Threat Modeling & Secure Design

Wabtec; Chicago (IL); On-site; USD 91,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Annual bonus (if eligible)

Job summary

Wabtec is seeking a Cybersecurity Engineer for Product Cybersecurity Engineering to assess and ensure compliance with cybersecurity standards across software and hardware products. The role partners with product managers and engineering teams to embed secure design and risk-based controls throughout the development lifecycle.

You will lead reviews, guidance on security principles, and training programs while helping to advance the company’s cybersecurity maturity across global product portfolios.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 8–10 years in design, development, and testing of web-based, embedded, and/or connected systems.
• 4+ years in product/application cybersecurity engineering, architecture, risk assessment, or risk management.
• Experience with cybersecurity frameworks such as IEC 62443, NIST 800-53, CSF, ISO/IEC 27001.
• Experience in industrial sectors (rail, transportation, manufacturing) preferred.
• Experience with secure product development and DevSecOps practices.
• Strong communication and stakeholder management skills.

Responsibilities

• Conduct cybersecurity reviews across the SDLC evaluating compliance with policies and controls.
• Partner with engineering to perform threat modeling, risk assessments, and security analyses.
• Provide guidance on cybersecurity principles to engineers, leadership, and stakeholders.
• Support vulnerability disclosure, remediation planning, and incident response activities.
• Develop and maintain cybersecurity standards, procedures, and training programs.

Skills

Threat modeling

Security architecture

Vulnerability assessments

Stakeholder communication

DevSecOps

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

PKI

Secure boot

Key management

Cryptography

Security testing tools

Job description

Wabtec is seeking a Cybersecurity Engineer for Product Cybersecurity Engineering to assess and ensure compliance with cybersecurity standards across software and hardware products. The role partners with product managers and engineering teams to embed secure design and risk-based controls throughout the development lifecycle.

You will lead reviews, guidance on security principles, and training programs while helping to advance the company’s cybersecurity maturity across global product portfolios.