Product Cybersecurity Engineer

About the role

Wabtec is hiring a Product Cybersecurity Engineer in Contagem, Brazil. You will work closely with Product Managers, software and systems engineering teams, technical leaders and cybersecurity colleagues across Wabtec's global organization, helping embed cybersecurity requirements into connected products, web services, industrial systems and embedded solutions throughout the product lifecycle.

Key responsibilities

• Conduct cybersecurity reviews and assessments throughout the SDLC to verify compliance with Wabtec standards and technical controls.
• Perform threat modeling, security analyses and risk assessments to find vulnerabilities, attack vectors and security gaps.
• Partner with engineering teams to recommend secure design principles, controls and mitigation strategies.
• Support cybersecurity initiatives across web applications, connected products, industrial systems and embedded platforms.
• Investigate defects, carry out root cause analysis and help with remediation.
• Contribute to vulnerability management, incident response and security improvement initiatives.
• Deliver cybersecurity training and awareness sessions for engineers, product managers and business stakeholders.
• Create, maintain and improve cybersecurity standards, procedures and best practices.
• Collaborate with global teams to integrate cybersecurity requirements into product architectures and development processes.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity or a related field.
• Experience designing, developing or testing web-based, embedded, connected or industrial systems.
• Hands-on experience in product cybersecurity engineering, security architecture, risk assessment or risk management.
• Strong communication skills and the ability to influence technical decisions and work with global, cross-functional teams.
• Experience in industrial sectors such as transportation, rail, mining, automotive, manufacturing or critical infrastructure is highly valued.

Required skills

• Threat modeling, attack surface analysis, vulnerability assessment and security testing methodologies.
• Cybersecurity standards and frameworks such as IEC 62443, NIST 800-53, NIST CSF and ISO/IEC 27001.
• Secure product development lifecycles and DevSecOps practices.
• Security architecture and cryptography, including PKI, secure boot, key management, certificate lifecycle management and secure communications.

What we offer

• Medical and dental assistance extended to dependents.
• Private pension plan, profit sharing and meal policy.
• Life insurance and Employee Assistance Program.
• Extended maternity leave, language incentive policy and mentorship programs.
• Training platform access, Headspace app, Christmas card or basket, and gift for children under 11.