Vulnerability Management Specialist
Core
Execute vulnerability management and product security response activities for Wabtec's rail equipment and digital solutions portfolio, protecting customers and products from cybersecurity threats.
Role type
Senior IC vulnerability management specialist
Builds
Production security posture and incident response capabilities for global rail products
Domain
Cybersecurity / Rail transportation / Industrial IoT
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability management, Secure Development Lifecycle (SDLC), CVSS/CVE/CWE frameworks, cybersecurity compliance (NERC-CIP, ISO, NIST), Python scripting, PowerShell scripting, incident response coordination, risk assessment
Preferred skills
Advanced cybersecurity certifications (Security+, CySA+, GCIH), experience with EU Cyber Resilience Act (CRA) reporting
Technologies
Vulnerability management tools, security scanning tools, Python, PowerShell
Responsibilities
Respond to product vulnerability emergencies and coordinate reporting per EU CRA; triage vulnerabilities using CVSS and determine product risk; monitor remediation and support vulnerability disposition; develop and report cybersecurity KPIs; coordinate vulnerability disclosure and advisories; support PSIRT readiness reviews and tabletop exercises; maintain operational documentation for program consistency.
Seniority
Senior, hands-on IC