Vulnerability Management Specialist

Job description

Essa posição é para atuar presencialmente em Contagem, MG. Who will you be working with? You will be working with the Product Cybersecurity Vulnerability Management team, collaborating closely with engineering, product management, cybersecurity, compliance, and business stakeholders across a global organization. This team is responsible for identifying, assessing, managing, and coordinating responses to cybersecurity vulnerabilities affecting Wabtec products while supporting regulatory compliance and product security resilience How will you make a difference?

As a member of the Product Cybersecurity group, you will be responsible for executing vulnerability management and product security response activities across Wabtec’s product portfolio. The Senior Vulnerability Management Specialist plays a critical role in protecting customers and products by identifying, evaluating, coordinating, and communicating security vulnerabilities and incidents. In this role, you will support vulnerability triage, disclosure, incident response, and compliance activities while partnering with engineering teams to ensure timely remediation and adherence to cybersecurity policies.

You will contribute to the continuous improvement of the Product Security Incident Response Team (PSIRT) program, support regulatory reporting obligations, and help strengthen the overall cybersecurity posture of Wabtec products. What do we want to know about you? Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related field. Experience in Cybersecurity. Cybersecurity certifications such as Security+, CySA+, and GCIH; advanced certifications are a plus.

In-depth experience with vulnerability management. Strong experience with Secure Development Lifecycle (SDLC). Strong experience with common vulnerability frameworks, including CVSS, CVE, and CWE. Experience with cybersecurity compliance standards and regulations such as NERC-CIP, ISO, and NIST. Experience with scripting languages such as Python and PowerShell. Strong critical thinking and analytical problem-solving skills.

Demonstrated ability to effectively manage multiple priorities while collaborating with stakeholders in a global organization. Demonstrated ability to respond to complex cybersecurity incidents in high-pressure, time-critical environments while maintaining effective communication and decision-making. Fluent English verbal and written communication skills. What will your typical day look like? Participate in and respond to product vulnerability emergency response activities.

Coordinate response activities and reporting for actively exploited product vulnerabilities in accordance with the EU Cyber Resilience Act (CRA) and applicable reporting obligations. Participate in a documented on-call rotation to ensure continuous product security incident detection and response coverage. Provide timely status updates to leadership during ongoing emergency response activities. Discover, assess, and document vulnerabilities reported through external researchers, penetration testing activities, and security scanning tools.

Collaborate with engineering teams to triage vulnerabilities using industry-standard methodologies such as CVSS and determine overall product risk. Monitor remediation activities and support vulnerability disposition through evidence collection and adherence to product cybersecurity policies. Develop, maintain, and report cybersecurity KPIs and program metrics. Support the administration, usage, and adoption of vulnerability management tools.

Develop and maintain operational documentation to improve readiness, resilience, and consistency of vulnerability management activities. Coordinate the vulnerability disclosure process in alignment with program policies and operational objectives. Coordinate the creation and publication of vulnerability advisories in partnership with engineering and business stakeholders. Support Product Security Incident Response Team (PSIRT) activities, including readiness reviews, tabletop exercises, and lessons learned initiatives.

Drive continuous improvement efforts to enhance the maturity and effectiveness of the vulnerability management program. Perform other product cybersecurity-related responsibilities as required to support the growth and evolution of the program. You may also be asked to perform other duties outside of your function or trade, for which adequate training will be provided if necessary.

Benefits

At Wabtec, people come first. That’s why we ensure our employees feel valued and have the tools they need to thrive. By joining us, you will have access to a range of benefits designed to support your well-being and development. Here’s what we offer to make you feel part of a company that supports your professional and personal journey: Medical

Assistance extended to dependents (spouse and children) Dental Assistance extended to dependents (spouse and children) Profit Sharing Private Pension Plan Meal Policy according to location Life Insurance Employee Assistance Program: psychological, legal, financial, and social support Headspace – mental health app Christmas Card or Basket for employees (based on location)

Christmas Gift for children up to 11 years old Extended Maternity Leave Program for Pregnant Women and Babies Language Incentive Policy Mentorship Programs and access to training platform Wellhub Pharmacy Assistance #LI-PROMOTEDJOBS