Staff Product Security Specialist

About the role

Wabtec is hiring a Staff Product Security Specialist to work onsite in Contagem, MG. The role leads the Product Security Incident Response Team (PSIRT) and coordinates cross-functional stakeholders during product vulnerability and cybersecurity incidents. It works with Product Security, Engineering, Enterprise Information Security, Compliance, Product Management and business leaders.

Key responsibilities

• Lead PSIRT response activities and coordinate stakeholders during product vulnerability and cybersecurity incidents
• Coordinate response and regulatory reporting for actively exploited vulnerabilities in line with the EU Cyber Resilience Act and rapid reporting obligations
• Maintain a documented on-call rotation for continuous incident coverage
• Collaborate with Enterprise Information Security teams on emergency response
• Facilitate incident response war rooms for triage, investigation and mitigation
• Lead management communications, escalations, security advisories and notifications
• Run preparedness activities such as tabletop exercises, readiness assessments and stakeholder engagement
• Lead lessons learned reviews and after-action activities
• Perform threat analysis using vulnerability characteristics, threat intelligence and risk information
• Prepare reports, risk assessments and KPIs for technical and business leadership
• Support and coordinate the vulnerability disclosure process

Required profile

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity or a related field
• Strong experience in cybersecurity and advanced certifications such as CISSP, CISM, GCIH or GCIL
• Experience with product vulnerability management and the Secure Development Lifecycle (SDLC)
• Ability to manage multiple priorities across a global organization and coordinate remote teams
• Advanced English verbal and written skills

Required skills

• Cybersecurity compliance standards such as NERC-CIP, ISO and NIST
• Vulnerability frameworks CVSS, CVE and CWE
• Incident response coordination under pressure

What we offer

• Medical and dental assistance extended to dependents
• Private pension plan, profit sharing and meal policy
• Life insurance, employee assistance program and Headspace app
• Christmas card or basket, gift for children up to 11, extended maternity leave and pregnancy program
• Language incentive policy, mentorship programs and training platform access