Product Cybersecurity Engineer: Threat Modeling & Secure Design

Wabtec; Erie (Erie County); On-site; USD 91,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Annual bonus

Job summary

Wabtec is seeking a Cybersecurity Engineer for Product Cybersecurity to drive security across web and embedded platforms. You will conduct SDLC security reviews, perform threat modeling, risk assessments, and collaborate with engineering and product teams to embed strong cybersecurity controls.

The role requires 8–10 years in design, development and testing of connected systems, with hands-on product cybersecurity experience and knowledge of standards such as NIST, ISO 27001, and IEC 62443.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 8–10 years designing, developing, and testing web-based or embedded systems.
• 4+ years in product cybersecurity engineering, architecture, or risk management.
• Experience with threat modeling, attack surface analysis, vulnerability assessments, and security testing.

Responsibilities

• Conduct cybersecurity reviews and assessments of products throughout the Software Development Lifecycle (SDLC), evaluating compliance with policies, standards, and technical controls.
• Partner with engineering teams to perform threat modeling, risk assessments, and security analyses to identify vulnerabilities and attack vectors.
• Provide expert guidance on cybersecurity principles, technologies, and risk management to engineering teams and stakeholders.
• Support cybersecurity consulting across product portfolios including web services and embedded systems.
• Recommend secure design principles, software security controls, hardening strategies, and risk mitigation measures.
• Support root-cause analyses and corrective actions for cybersecurity defects.
• Develop and deliver cybersecurity training and awareness programs for engineers and stakeholders.
• Contribute to development and improvement of cybersecurity standards and practices.
• Promote cybersecurity best practices across the organization.

Skills

Cybersecurity engineering

Threat modeling

Risk assessment

Security architecture

DevSecOps

Stakeholder management

Strong communication

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Job description

Wabtec is seeking a Cybersecurity Engineer for Product Cybersecurity to drive security across web and embedded platforms. You will conduct SDLC security reviews, perform threat modeling, risk assessments, and collaborate with engineering and product teams to embed strong cybersecurity controls.

The role requires 8–10 years in design, development and testing of connected systems, with hands-on product cybersecurity experience and knowledge of standards such as NIST, ISO 27001, and IEC 62443.