Product Cybersecurity Engineer: Threat Modeling & Secure Design

Wabtec; Melbourne (FL); On-site; USD 91,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Retirement plan

Annual bonus

Job summary

Wabtec seeks a Cybersecurity Engineer to assess cybersecurity of our products, ensuring compliance with Wabtec standards and technical controls. You will advise product managers and engineering teams, and promote best practices across the organization.

You will conduct SDLC reviews, perform threat modeling and risk assessments, support incident response, and develop training to raise security maturity across web, embedded, and connected systems.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 8–10 years of experience in design, development, and testing of web-based, embedded, and/or connected systems.
• 4+ years hands-on experience in product cybersecurity engineering, architecture, risk assessment, or risk management.
• Experience with threat modeling, attack surface analysis, vulnerability assessments, and security testing.
• Experience applying cybersecurity frameworks such as IEC 62443, NIST 800-53, CSF, ISO/IEC 27001.

Responsibilities

• Conduct cybersecurity reviews and assessments across the Software Development Lifecycle (SDLC).
• Partner with engineering teams for threat modeling, risk assessments, and security analyses.
• Provide guidance on cybersecurity principles, technologies, and risk management.
• Support cybersecurity consulting across Wabtec's connected products and embedded portfolios.
• Develop and deliver cybersecurity training and awareness programs.

Skills

Threat modeling

Vulnerability assessments

Security architecture

PKI

Secure boot

Key management

Certificate lifecycle

Secure communications

DevSecOps

Risk assessment

Product security engineering

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

NIST/CSF

IEC 62443

ISO/IEC 27001

Job description

Wabtec seeks a Cybersecurity Engineer to assess cybersecurity of our products, ensuring compliance with Wabtec standards and technical controls. You will advise product managers and engineering teams, and promote best practices across the organization.

You will conduct SDLC reviews, perform threat modeling and risk assessments, support incident response, and develop training to raise security maturity across web, embedded, and connected systems.