Product Cybersecurity Engineer at Wabtec

Who will you be working with?   In this role, you will work with a global team.    How will you make a difference?    The Product Cybersecurity Engineer will support in secure software development practices and will collaborate closely with product engineering teams to embed and automate security testing within CI/CD pipelines. The ideal candidate will drive the maturity of our secure development lifecycle and enhance the overall security posture of our products.   What do we want to know about you?  • Bachelor’s degree in computer science, software engineering, cybersecurity, or a related field. • Proven experience in application and information security. • Hands-on experience with SAST, DAST, SCA tools such as Coverity, Checkmarx, Fortify, OWASP ZAP, Invicti, Black Duck, SemGrep, Synk • Strong understanding of DevSecOps practices and CI/CD tools (Git, Jenkins, Jira, Maven, Gradle, TeamCity, Artifactory). • Proficiency in secure code review and dynamic application security testing. • Solid grasp of application security threats and vulnerabilities across web, mobile, and embedded platforms. • Familiarity with security frameworks (OWASP, NIST, MITRE, SANS CWE) and standards (ISO 27001, IEC 62443, Privacy). • Experience with open-source license governance and container/cloud security. • Exposure to firmware and embedded system security testing. • Scripting skills (e.g., Python, Shell) and programming knowledge (e.g., C/C++, Java, Golang, C#). • Working knowledge of PowerBI and service operations is a plus. • Advanced English verbal and written communication skills. • High integrity and ability to handle confidential information. • DevSecOps Certifications (CDP/CDE/GSCA), CSSLP, CISSP, SANS certifications (at least one strongly preferred)  What will your typical day look like?  • Implement and integrate security scanning tools (SAST, DAST, etc.) into CI/CD pipelines. • Ensure security policies are consistently applied throughout the product development lifecycle. • Partner with development teams to promote adoption of security tools and frameworks. • Provide hands-on support and guidance to Product Engineering team on security scanning tools and secure coding practices. • Continuously improve the accuracy and relevance of security scans. • Support Product engineering teams to assess scan results, triage findings, and provide risk-based remediation guidance. • Develop and maintain SOPs, best practices, and contribute to the internal security knowledge base. • Conduct training and awareness sessions for development teams. • Enhance Product Cybersecurity Testing Services KPIs/KRIs. • Deliver actionable insights through regular reporting and dashboards. • Deliver security services aligned with ITIL processes. • Envision and evolve the roadmap for product security testing services to support emerging technologies.  Benefícios: Na Wabtec, pessoas estão em primeiro lugar. Por isso, cuidamos para que nossos funcionários se sintam valorizados e tenham as ferramentas necessárias para prosperar. Ao se juntar a nós, você terá acesso a uma série de benefícios pensados para promover seu bem-estar e desenvolvimento. Confira o que oferecemos para que você se sinta parte de uma empresa que apoia sua jornada profissional e pessoal:   • Assistência Médica extensível a dependentes (cônjuge e filhos). • Assistência Odontológica extensível a dependentes (cônjuge e filhos). • Participação nos lucros e resultados. • Previdência Privada. • Política de Alimentação de acordo com localidade. • Seguro de vida. • Programa de Assistência ao Empregado: orientação psicológica, jurídica, financeira e assistência social. • Headspace – aplicativo focado em saúde mental. • Cartão ou Cesta de Natal aos funcionários de acordo com localidade. • Presente de Natal para filhos de até 11 anos de idade. • Licença maternidade estendida. • Programa para Gestantes e Bebês. • Política de incentivo a idiomas. • Programas de Mentoria e acesso a plataforma de treinamento. • Wellhub. • Auxílio farmácia.#LI-IM1