Cybersecurity Engineer

Wabtec Corporation is a leading global provider of equipment, systems, digital solutions, and value-added services for freight and transit rail. With a rich history spanning nearly four centuries, the company has unmatched digital expertise, technological innovation, and world-class manufacturing and services, enabling the digital-rail-and-transit ecosystems.

We are seeking a highly skilled Cybersecurity Engineer to join our team. As a key member of our cybersecurity team, you will be responsible for advising product managers and engineering teams on cybersecurity standards and technical controls, recommending best practices for satisfying these standards and controls for web systems designed for cloud, on-premises, and mobile environments.

• Conduct ongoing cybersecurity reviews of Wabtec products and determine whether Cybersecurity Authorization to Operate (CATO) should be granted based on compliance with Wabtec policies, standards, and technical controls.
• Drive and support an authoritative technical consultation process on product cybersecurity across Wabtec's embedded electronics and non-IT networked product portfolio, including connected vehicle security, secure implementation of real-time operating systems, ongoing security support for heavy industrial systems, and web services.
• Drive and support processes to ensure Wabtec products implement appropriate cybersecurity controls, features, and requirements per applicable customer requirements, recognized industry standards, and engineering best practices.
• Support engineering teams responsible for conducting threat and risk assessments to quantify product threat surfaces and attack vectors.
• Recommend and consult on the design of software controls, environment/server hardening measures, and other risk mitigations to minimize attack surface and support cost-effective field maintainability of security controls.
• Support engineering teams responsible for conducting root cause and corrective actions related to cybersecurity defects.
• Create, seek, and share best practices for product cybersecurity across the Wabtec product portfolio.
• Deliver effective project management and technical communications.
• Understand technical cybersecurity concepts and their business implications and be able to clearly explain these concepts to management and other engineers.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Experience with design, development, and/or testing of web systems.
• Extensive hands-on experience in container management, cloud environment (AWS Lambda, Kubernetes, Kafka, ...), threat modeling, open worldwide application security project (OWASP) certificate management & PKI, cryptography, web application penetration testing, server hardening, secure data management (at rest / in transit), access control management, firewall configuration, GDPR, and PII.
• Experience working with large enterprise web applications (e.g., bank, insurance).
• Experience with cybersecurity assessment tools and methods.

Wabtec Corporation is committed to taking on the world's toughest challenges. We rely on a culture of leadership, diversity, and inclusiveness. We aim to employ the world's brightest minds to help us create a limitless source of ideas and opportunities. We believe in hiring talented people of varied backgrounds, experiences, and styles.

We are an equal employment opportunity employer and welcome applications from diverse candidates. If you have a disability or special need that requires accommodation, please let us know.