Cybersecurity Engineer, Product Cybersecurity
Core
Conduct cybersecurity assessments and reviews of web, embedded, and connected industrial products throughout the Software Development Lifecycle (SDLC) to ensure compliance with Wabtec standards and external regulations.
Role type
Senior IC product cybersecurity engineer (embedded/IoT/industrial)
Builds
Secure rail, transportation, and industrial product portfolios
Domain
Industrial IoT, rail transportation, embedded systems
Deliverable
production ML models | product features
Required skills
threat modeling, security architecture, risk assessment, secure product design, DevSecOps, cryptographic technologies (PKI, secure boot, key management), vulnerability assessment, security incident response, IEC 62443, NIST 800-53, NIST CSF, ISO/IEC 27001
Preferred skills
industrial sector experience (rail, mining, automotive), secure communications, certificate lifecycle management
Technologies
IEC 62443, NIST 800-53, NIST CSF, ISO/IEC 27001, PKI, secure boot, key management
Responsibilities
Conduct cybersecurity reviews and assessments of Wabtec products throughout the SDLC; Partner with engineering teams to perform threat modeling, threat and risk assessments, and security analyses; Recommend secure design principles, software security controls, hardening strategies, and risk mitigation measures; Support engineering teams in investigating cybersecurity defects, performing root cause analyses, and implementing corrective actions; Contribute to the development and continuous improvement of cybersecurity standards, procedures, and technical controls; Collaborate with product development teams to integrate cybersecurity requirements into product architectures and designs.
Seniority
Senior, hands-on IC