Product Cybersecurity Engineer - Threat Modeling & Secure Design

Wabtec; Erie (Erie County); On-site; USD 91,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Annual bonus (eligible)

Retirement plan

Job summary

The Cybersecurity Engineer at Wabtec will perform ongoing cybersecurity assessments of Wabtec products to ensure compliance with internal standards and controls. You will advise product managers and engineering teams, promote cybersecurity awareness, and help define technical controls across product lines.

You will work with cross-functional teams to model threats, conduct risk analyses, and recommend secure design practices, cryptographic implementations, and secure software development

Qualifications

• Bachelor's degree in CS, cybersecurity, or related field required.
• 8–10 years designing, developing, testing web/embedded systems.
• 4+ years in product/security engineering, architecture or risk management.
• Familiar with threat modeling, risk assessments, security testing.
• Experience with IEC 62443, NIST CSF, NIST 800-53, ISO/IEC 27001.

Responsibilities

• Conduct cybersecurity reviews and assessments across the SDLC for Wabtec products.
• Partner with engineering to perform threat modeling and risk analyses.
• Provide guidance on cybersecurity principles and communicate to stakeholders.
• Support cybersecurity consulting across connected products, web services, and embedded systems.
• Recommend secure design principles and corrective actions to reduce attack surface.
• Investigate cybersecurity defects and assist in root-cause analysis.
• Develop cybersecurity training and awareness programs for engineers and leadership.
• Contribute to standards, procedures, and best practices.
• Promote cybersecurity maturity across the organization and partners.
• Collaborate with product teams to integrate cybersecurity requirements into architectures.
• Support vulnerability disclosure, remediation planning, and incident response.

Skills

Cybersecurity engineering

Threat modeling

Security architecture

Risk assessment

Cryptography

DevSecOps

Embedded security

Stakeholder communication

Security standards

Education

Bachelor's degree in Computer Science, Cybersecurity, or a related field

Job description

The Cybersecurity Engineer at Wabtec will perform ongoing cybersecurity assessments of Wabtec products to ensure compliance with internal standards and controls. You will advise product managers and engineering teams, promote cybersecurity awareness, and help define technical controls across product lines.

You will work with cross-functional teams to model threats, conduct risk analyses, and recommend secure design practices, cryptographic implementations, and secure software development