Product Cybersecurity Engineer

Who will you be working with?  

In this role, you will work with a global team. 

How will you make a difference?   

The Product Cybersecurity Engineer will support in secure software development practices and will collaborate closely with product engineering teams to embed and automate security testing within CI/CD pipelines. The ideal candidate will drive the maturity of our secure development lifecycle and enhance the overall security posture of our products.

What do we want to know about you? 

• Bachelor’s degree in computer science, software engineering, cybersecurity, or a related field.
• Proven experience in application and information security.
• Hands-on experience with SAST, DAST, SCA tools such as Coverity, Checkmarx, Fortify, OWASP ZAP, Invicti, Black Duck, SemGrep, Synk
• Strong understanding of DevSecOps practices and CI/CD tools (Git, Jenkins, Jira, Maven, Gradle, TeamCity, Artifactory).
• Proficiency in secure code review and dynamic application security testing.
• Solid grasp of application security threats and vulnerabilities across web, mobile, and embedded platforms.
• Familiarity with security frameworks (OWASP, NIST, MITRE, SANS CWE) and standards (ISO 27001, IEC 62443, Privacy).
• Experience with open-source license governance and container/cloud security.
• Exposure to firmware and embedded system security testing.
• Scripting skills (e.g., Python, Shell) and programming knowledge (e.g., C/C++, Java, Golang, C#).
• Working knowledge of PowerBI and service operations is a plus.
• Advanced English verbal and written communication skills.
• High integrity and ability to handle confidential information.
• DevSecOps Certifications (CDP/CDE/GSCA), CSSLP, CISSP, SANS certifications (at least one strongly preferred)

What will your typical day look like? 

• Implement and integrate security scanning tools (SAST, DAST, etc.) into CI/CD pipelines.
• Ensure security policies are consistently applied throughout the product development lifecycle.
• Partner with development teams to promote adoption of security tools and frameworks.
• Provide hands-on support and guidance to Product Engineering team on security scanning tools and secure coding practices.
• Continuously improve the accuracy and relevance of security scans.
• Support Product engineering teams to assess scan results, triage findings, and provide risk-based remediation guidance.
• Develop and maintain SOPs, best practices, and contribute to the internal security knowledge base.
• Conduct training and awareness sessions for development teams.
• Enhance Product Cybersecurity Testing Services KPIs/KRIs.
• Deliver actionable insights through regular reporting and dashboards.
• Deliver security services aligned with ITIL processes.
• Envision and evolve the roadmap for product security testing services to support emerging technologies.

Benefícios:

Na Wabtec, pessoas estão em primeiro lugar. Por isso, cuidamos para que nossos funcionários se sintam valorizados e tenham as ferramentas necessárias para prosperar. Ao se juntar a nós, você terá acesso a uma série de benefícios pensados para promover seu bem-estar e desenvolvimento. Confira o que oferecemos para que você se sinta parte de uma empresa que apoia sua jornada profissional e pessoal:

• Assistência Médica extensível a dependentes (cônjuge e filhos).
• Assistência Odontológica extensível a dependentes (cônjuge e filhos).
• Participação nos lucros e resultados.
• Previdência Privada.
• Política de Alimentação de acordo com localidade.
• Seguro de vida.
• Programa de Assistência ao Empregado: orientação psicológica, jurídica, financeira e assistência social.
• Headspace – aplicativo focado em saúde mental.
• Cartão ou Cesta de Natal aos funcionários de acordo com localidade.
• Presente de Natal para filhos de até 11 anos de idade.
• Licença maternidade estendida.
• Programa para Gestantes e Bebês.
• Política de incentivo a idiomas.
• Programas de Mentoria e acesso a plataforma de treinamento.
• Wellhub.
• Auxílio farmácia.

What could you accomplish in a place that puts People First?

At Wabtec, it’s not just about a job - it’s about the impact you make. When our people come together, we’re Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.

If you’re ready to revolutionize how the world moves for future generations, Wabtec is the place for you.
 

Who are we?

Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together – are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.

Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We’re lifelong learners, obsessed with better. Learn more at www.WabtecCorp.com.

Culture powers us and the possibilities.

We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We’re building a culture where leadership, inclusion and your unique perspective fuel progress.

We’re proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.

Need accommodation? Just let us know - we’ve got you.