Product Cybersecurity Engineer

Who will you be working with? 

In this role, you will work with a global team.

How will you make a difference?  

The Product Cybersecurity Engineer will support in secure software development practices and will collaborate closely with product engineering teams to embed and automate security testing within CI/CD pipelines. The ideal candidate will drive the maturity of our secure development lifecycle and enhance the overall security posture of our products.

What do we want to know about you?

• Bachelor’s degree in computer science, software engineering, cybersecurity, or a related field.
• Proven experience in application and information security.
• Hands-on experience with SAST, DAST, SCA tools such as Coverity, Checkmarx, Fortify, OWASP ZAP, Invicti, Black Duck, SemGrep, Synk
• Strong understanding of DevSecOps practices and CI/CD tools (Git, Jenkins, Jira, Maven, Gradle, TeamCity, Artifactory).
• Proficiency in secure code review and dynamic application security testing.
• Solid grasp of application security threats and vulnerabilities across web, mobile, and embedded platforms.
• Familiarity with security frameworks (OWASP, NIST, MITRE, SANS CWE) and standards (ISO 27001, IEC 62443, Privacy).
• Experience with open-source license governance and container/cloud security.
• Exposure to firmware and embedded system security testing.
• Scripting skills (e.g., Python, Shell) and programming knowledge (e.g., C/C++, Java, Golang, C#).
• Working knowledge of PowerBI and service operations is a plus.
• Advanced English verbal and written communication skills.
• High integrity and ability to handle confidential information.
• DevSecOps Certifications (CDP/CDE/GSCA), CSSLP, CISSP, SANS certifications (at least one strongly preferred)

What will your typical day look like?

• Implement and integrate security scanning tools (SAST, DAST, etc.) into CI/CD pipelines.
• Ensure security policies are consistently applied throughout the product development lifecycle.
• Partner with development teams to promote adoption of security tools and frameworks.
• Provide hands-on support and guidance to Product Engineering team on security scanning tools and secure coding practices.
• Continuously improve the accuracy and relevance of security scans.
• Support Product engineering teams to assess scan results, triage findings, and provide risk-based remediation guidance.
• Develop and maintain SOPs, best practices, and contribute to the internal security knowledge base.
• Conduct training and awareness sessions for development teams.
• Enhance Product Cybersecurity Testing Services KPIs/KRIs.
• Deliver actionable insights through regular reporting and dashboards.
• Deliver security services aligned with ITIL processes.
• Envision and evolve the roadmap for product security testing services to support emerging technologies.

Benefícios:

Na Wabtec, pessoas estão em primeiro lugar. Por isso, cuidamos para que nossos funcionários se sintam valorizados e tenham as ferramentas necessárias para prosperar. Ao se juntar a nós, você terá acesso a uma série de benefícios pensados para promover seu bem-estar e desenvolvimento. Confira o que oferecemos para que você se sinta parte de uma empresa que apoia sua jornada profissional e pessoal:

• Assistência Médica extensível a dependentes (cônjuge e filhos).
• Assistência Odontológica extensível a dependentes (cônjuge e filhos).
• Participação nos lucros e resultados.
• Previdência Privada.
• Política de Alimentação de acordo com localidade.
• Seguro de vida.
• Programa de Assistência ao Empregado: orientação psicológica, jurídica, financeira e assistência social.
• Headspace – aplicativo focado em saúde mental.
• Cartão ou Cesta de Natal aos funcionários de acordo com localidade.
• Presente de Natal para filhos de até 11 anos de idade.
• Licença maternidade estendida.
• Programa para Gestantes e Bebês.
• Política de incentivo a idiomas.
• Programas de Mentoria e acesso a plataforma de treinamento.
• Wellhub.
• Auxílio farmácia.