Senior Cybersecurity Engineer

It’s not just about your career or job title… It’s about who you are and the impact you will make on the world. Because whether it’s for each other or our customers, we put People First. When our people come together, we Expand the Possible and continuously look for ways to improve what we create and how we do it. If you are constantly striving to grow, you’re in good company. We are revolutionizing the way the world moves for future generations, and we want someone who is ready to move with us.

Who will you be working with?

Join Enterprise Information Security to drive cybersecurity excellence leveraging intelligence, strategic partnerships, and analysis. Collaborate daily with cybersecurity personnel from Governance, Risk & Compliance and Security Operations along with key Information Technology stakeholders to advance our information security capabilities.

How will you make a difference?

As a member of Enterprise Information Security, Wabtec is looking for an individual to run a best-in-class Mergers & Acquisitions and Network Security program. The Senior Cybersecurity Engineer reports directly into EIS Leadership and will drive secure integration of acquisitions and lead scalable network security programs that align with business growth and risk management objectives.

What do we want to know about you?

You must have:

• Bachelor’s degree in computer engineering or STEM major and/or a minimum of five years of information security, risk management, network engineering, vulnerability management, information technology or equivalent experience
• 2+ year's experience with common network protocols (TCP/IP, DNS, HTTP/S, etc.)
• 2+ year's experience with network security tools (e.g., IDS/IPS, vulnerability scanners, SIEM platforms)
• Ability to maintain an elevated level of discretion and personal integrity in the exercise of duties, including the ability to professionally address confidential matters
• Strong understanding of firewall technologies and operations with experience with network architecture and segmentation from a security perspective
• Proficiency in reviewing and advising on secure network design and access controls (i.e., analyzing firewall rule sets and identifying misconfigurations or excessive access)
• Ability to identify integration risks and recommend mitigation strategies
• Effective communication with cross-functional teams, including legal, IT, and executive leadership
• Clear documentation and reporting abilities for findings and recommendations
• Must be willing to work weekends/off-shift hours, as needed during incidents

We would love it if you had:

• Understanding of threat modeling and risk assessment frameworks
• Familiarity with compliance standards (e.g., NIST, ISO 27001, PCI-DSS)
• Experience supporting M&A activities collaborating on integration plans, especially in evaluating security posture of target environments to keep security at the forefront
• Strong analytical skills to interpret complex rule sets and network flows
• Direct experience using SIEM, Splunk to uncover insights and highlight notables
• Effective project management skills with ability to work on a Global team
• Candidate must be able to react quickly, decisively, and deliberately in high stress situations

What will your typical day look like?

Merger & Acquisition activities

• Participate in and maintain merger & acquisition IT and security due diligence processes
• Leverage experience in information security to assess network-based risks during M&A due diligence and post-acquisition integration
• Proactively identify integration risks and recommend mitigation strategies
• Execute and enhance M&A procedures to accelerate integration and strengthen overall acquisition capabilities.

Network related activities

• Manage incoming requests related to network and security configurations, ensuring alignment with organizational policies and standards.
• Assess proposed changes to network architecture and connectivity to identify potential security implications.
• Collaborate with business and technical teams to design secure and efficient network solutions that support operational needs.
• Analyze complex network and security scenarios to recommend risk-mitigating strategies and practical solutions.
• Provide expert input on secure network design, access controls, and segmentation practices.
• Stay informed on evolving network security threats and technologies to proactively support secure operations.

What about the physical demands of the job? (Usual office job examples)

• Regularly remaining in a stationary posit