Staff Product Security Specialist

Job Description

Essa posição é para atuar presencialmente em Contagem, MG.

Who will you be working with?  

In this role, you will work as part of the Product Security Incident Response Team (PSIRT).

How will you make a difference?   

The Staff PSIRT Specialist is responsible for leading emergency response activities.

What do we want to know about you? 

• Bachelor’s degree in computer science, software engineering, cybersecurity, or a related field.
• Proven experience in cybersecurity.
• Advanced cybersecurity certifications (CISSP, CISM, GCIH, GCIL).
• Experience with product vulnerability management. 
• Strong critical thinking skills
• Experience with the secure development lifecycle
• Experience with compliance standards & regulations (NERC-CIP, ISO, NIST)
• Advanced experience with common vulnerability frameworks (CVSS, CVE, CWE).
• Demonstrated ability to effectively manage multiple tasks, working with various stakeholders in a global organization.
• Demonstrated ability to effectively coordinate remote/virtual teams to achieve business outcomes
• Demonstrated ability to lead and coordinate complex cybersecurity incident response activities in high-pressure, time-critical environments, maintaining clear decision-making, effective communication, and prioritization under stress.
• Advanced English verbal and written communication skills.

What will your typical day look like? 

• Lead PSIRT response and coordination of stakeholders to product vulnerability vulnerabilities.
• Coordinate response to and reporting of actively exploited product vulnerabilities in accordance with EU’s Cyber Resilience Act (CRA) and the rapid reporting obligations.
• Maintain and participate in a documented on-call rotation to ensure continuous coverage for product security incident detection and response, including adherence to defined response procedures, escalation protocols, and audit requirements.
• Collaborate with Enterprise Information Security in preparation and execution of emergency response activities.
• Facilitate “war rooms” as required for vulnerability triaging and emergency response activities.
• Lead updates to management, coordinating escalation demands as necessary during on-going emergency response activities.
• Lead the development and distribution of security advisories and notifications across the organization.
• Conduct response readiness activities such as tabletop exercises, monitoring through readiness checklists, and stakeholder engagement to ensure organizational readiness.
• Lead lessons learned and after-action activities.
• Conduct threat analysis based on vulnerability characteristics and threat intelligence.
• Prepare reports and presentations communicating risks and status to a diverse audience of technical and business leadership.
• Lead the presentation and communication of key performance indicators (KPIs) and metrics.
• Actively drives continuous improvement and growth of the program.
• Support the vulnerability disclosure process.

Benefits

At Wabtec, people come first. That’s why we ensure our employees feel valued and have the tools they need to thrive. By joining us, you will have access to a range of benefits designed to support your well-being and development. Here’s what we offer to make you feel part of a company that supports your professional and personal journey:

• Medical Assistance extended to dependents (spouse and children)
• Dental Assistance extended to dependents (spouse and children)
• Profit Sharing
• Private Pension Plan
• Meal Policy according to location
• Life Insurance
• Employee Assistance Program: psychological, legal, financial, and social support
• Headspace – mental health app
• Christmas Card or Basket for employees (based on location)
• Christmas Gift for children up to 11 years old
• Extended Maternity Leave
• Program for Pregnant Women and Babies
• Language Incentive Policy
• Mentorship Programs and access to training platform
• Wellhub
• Pharmacy Assistance

Additional Information

What could you accomplish in a place that puts People First?

At Wabtec, it’s not just about a job - it’s about the impact you make. When our people come together, we’re Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.

If you’re ready to revolutionize how the world moves for future generations, Wabtec is the place for you.
 

Who are we?

Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together – are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.

Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We’re lifelong learners, obsessed with better. Learn more at www.WabtecCorp.com.

Culture powers us and the possibilities.

We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We’re building a culture where leadership, inclusion and your unique perspective fuel progress.

We’re proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.

Need accommodation? Just let us know - we’ve got you.