Staff Product Security Specialist

Job description

Essa posição é para atuar presencialmente em Contagem, MG. Who will you be working with? You will be working with the Product Security Incident Response Team (PSIRT), partnering closely with Product Security, Engineering, Enterprise Information Security, Compliance, Product Management, and business leaders across the organization. This team is responsible for coordinating security incident response activities, managing product vulnerability disclosures, supporting regulatory reporting requirements, and ensuring the organization's readiness to effectively respond to cybersecurity threats. How will you make a difference? As a member of the Product Cybersecurity organization, you will be responsible for leading Product Security Incident Response Team (PSIRT) activities and coordinating cross-functional stakeholders during product vulnerability and cybersecurity emergency response situations. The Staff Product Security Specialist serves as a technical and operational leader, driving rapid decision-making, communication, and execution during critical security events. In this role, you will facilitate incident response activities, support regulatory compliance obligations, conduct threat analysis, and lead organizational readiness initiatives to strengthen Wabtec's product security posture. You will work closely with global teams to ensure vulnerabilities and security incidents are effectively managed while continuously improving the maturity and effectiveness of the PSIRT program. What do we want to know about you? Required Experience & Qualifications Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related field. Strong experience in Cybersecurity. Advanced cybersecurity certifications such as CISSP, CISM, GCIH, GCIL, or equivalent. Experience with product vulnerability management. Strong critical thinking and analytical problem-solving skills. Experience with Secure Development Lifecycle (SDLC) practices. Experience with cybersecurity compliance standards and regulations, including NERC-CIP, ISO, and NIST. Advanced knowledge of common vulnerability frameworks, including CVSS, CVE, and CWE. Demonstrated ability to effectively manage multiple priorities while working across a global organization. Demonstrated ability to coordinate remote and virtual teams to achieve business objectives. Demonstrated ability to lead and coordinate complex cybersecurity incident response activities in high-pressure, time-critical environments while maintaining effective communication and prioritization. Advanced English verbal and written communication skills. What will your typical day look like? Lead PSIRT response activities and coordinate stakeholders during product vulnerability and cybersecurity incidents. Coordinate response efforts and regulatory reporting for actively exploited product vulnerabilities in accordance with the EU Cyber Resilience Act (CRA) and applicable rapid reporting obligations. Maintain and participate in a documented on-call rotation to ensure continuous coverage for product security incident detection and response activities. Collaborate with Enterprise Information Security teams in the preparation and execution of emergency response activities. Facilitate incident response “war rooms” for vulnerability triage, investigation, and mitigation activities. Lead management communications and coordinate escalation activities during ongoing emergency response situations. Lead the development and distribution of security advisories, notifications, and stakeholder communications. Conduct preparedness and readiness activities, including tabletop exercises, readiness assessments, and stakeholder engagement programs. Lead lessons learned reviews and after-action activities following security incidents and emergency response events. Perform threat analysis leveraging vulnerability characteristics, threat intelligence, and risk information. Prepare and present reports, risk assessments, and status updates to both technical and business leadership audiences. Lead the development, presentation, and communication of key performance indicators (KPIs) and program metrics. Drive continuous improvement initiatives that increase the effectiveness and maturity of the PSIRT program. Support and coordinate the vulnerability disclosure process. You may also be asked to perform other duties outside of your function or trade, for which adequate training will be provided if necessary. Benefits At Wabtec, people come first. That’s why we ensure our employees feel valued and have the tools they need to thrive. By joining us, you will have access to a range of benefits designed to support your well-being and development. Here’s what we offer to make you feel part of a company that supports your professional and personal journey: Medical Assistance extended to dependents (spouse and children) Dental Assistance extended to dependents (spouse and children) Profit Sharing Private Pension Plan Meal Policy according to location Life Insurance Employee Assistance Program: psychological, legal, financial, and social support Headspace – mental health app Christmas Card or Basket for employees (based on location) Christmas Gift for children up to 11 years old Extended Maternity Leave Program for Pregnant Women and Babies Language Incentive Policy Mentorship Programs and access to training platform Wellhub Pharmacy Assistance #LI-PROMOTEDJOBS What could you accomplish in a place that puts People First? At Wabtec, it’s not just about a job - it’s about the impact you make. When our people come together, we’re Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other. If you’re ready to revolutionize how the world moves for future generations, Wabtec is the place for you. Who are we? Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together – are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike. Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We’re lifelong learners, obsessed with better. Learn more at . Culture powers us and the possibilities. We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We’re building a culture where leadership, inclusion and your unique perspective fuel progress. We’re proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more. Need accommodation? Just let us know - we’ve got you.