Product Cybersecurity Engineer - Threat Modeling & Security

Wabtec; Chicago (IL); On-site; USD 91,000 - 130,000; Full time

Benefits offered by this job

Health/welfare/retirement

Annual bonus

Job summary

Wabtec in the United States is seeking a Cybersecurity Engineer to lead ongoing assessments of our products for compliance with internal standards and external frameworks. You will partner with product managers and engineering teams to define and maintain technical controls and promote secure design across web, embedded, and connected systems.

You will conduct SDLC reviews, threat modeling, risk assessments, and security testing; provide guidance to non-technical stakeholders; support

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 8–10 years of experience in web-based, embedded, and/or connected systems.
• 4+ years hands-on in product cybersecurity engineering, architecture, risk assessment, or risk management.
• Experience with cybersecurity frameworks such as IEC 62443, NIST 800-53, CSF, ISO/IEC 27001.
• Experience in industrial sectors such as rail, transportation, mining, automotive, manufacturing, or critical infrastructure.

Responsibilities

• Conduct cybersecurity reviews and assessments across SDLC for compliance.
• Partner with engineering teams to perform threat modeling, risk assessments, and security analyses.
• Provide expert guidance on cybersecurity principles, technologies, and risk management.
• Support cybersecurity consulting across connected products, web service, industrial systems and embedded products.
• Recommend secure design principles, software security controls, and hardening strategies.
• Support engineering teams in investigating cybersecurity defects and root causes.
• Develop and deliver cybersecurity training and awareness programs for engineers and leaders.
• Contribute to cybersecurity standards, procedures, and best practices.
• Promote cybersecurity best practices across the organization to improve maturity.
• Collaborate with product teams to integrate cybersecurity requirements into architectures.
• Support vulnerability disclosure, remediation planning, and security incident response.

Skills

Threat modeling

Security architecture

Cybersecurity engineering

Risk assessment

Security testing

DevSecOps

Embedded systems

Web security

Cryptography

Education

Bachelor's degree in Computer Science, Cybersecurity, or a related field

Tools

PKI

Secure boot

Key management

Certificate lifecycle

Secure communications

Job description

Wabtec in the United States is seeking a Cybersecurity Engineer to lead ongoing assessments of our products for compliance with internal standards and external frameworks. You will partner with product managers and engineering teams to define and maintain technical controls and promote secure design across web, embedded, and connected systems.

You will conduct SDLC reviews, threat modeling, risk assessments, and security testing; provide guidance to non-technical stakeholders; support