Principal Cybersecurity Engineer

Job description

It’s not just about your career or job title… It’s about who you are and the impact you will make on the world. Because whether it’s for each other or our customers, we put People First. When our people come together, we Expand the Possible and continuously look for ways to improve what we create and how we do it. If you are constantly striving to grow, you’re in good company. We are revolutionizing the way the world moves for future generations, and we want someone who is ready to move with us.   Who are we?   Wabtec Corporation is a leading global provider of equipment, systems, digital solutions, and value-added services for freight and transit rail as well as the mining, marine, and industrial markets. Drawing on nearly four centuries of collective experience across Wabtec, GE Transportation, and Faiveley Transport, the company has grown to become One Wabtec, with unmatched digital expertise, technological innovation, and world-class manufacturing and services, enabling the digital-rail-and-transit ecosystems. Wabtec is focused on performance that drives progress and unlocks our customers’ potential by delivering innovative and lasting transportation solutions that move and improve the world. We are lifelong learners obsessed with making things better to drive exceptional results. Wabtec has approximately 27K employees in facilities throughout the world. Visit our website to learn more!   Who will you be working with? Join Enterprise Information Security (EIS) to drive cybersecurity excellence leveraging intelligence, strategic partnerships and analysis. Collaborate daily with Information Technology stakeholders to advance our information security capabilities. How will you make a difference? Join Enterprise Information Security and play a key role in advancing Wabtec Corporation’s cybersecurity program. As Principal Cybersecurity Engineer, you will lead the design, implementation and continuous improvement of enterprise‑wide protections for email, data and endpoint platforms. In this highly visible role, you will shape strategic security capabilities that reduce risk, strengthen resilience and enable the business to operate securely. You will serve as a technical authority and trusted advisor, driving the adoption of modern security controls, ensuring defenses evolve to address emerging threats. Join us and help drive cybersecurity excellence! What do we want to know about you? You must have: • Bachelor’s degree in computer science, Information Technology, related field, or a minimum of 8 years of experience in cybersecurity. • Technical expertise in Microsoft Defender for Office 365 (MDO), including policy design, anti-phishing strategy, threat investigation and tuning at enterprise scale. • Hands-on experience with Microsoft Defender for Endpoint (MDE), including EDR operations, Advanced Hunting (KQL), Attack Surface Reduction and detection engineering. • Experience with Microsoft Purview, including Information Protection, Sensitivity Label architecture, DLP strategy, eDiscovery and data lifecycle governance. • Ability to define and drive enterprise security strategies without direct managerial authority, influencing outcomes through technical credibility and thought leadership. • Demonstrated success operationalizing security controls, embedding protection into real-world business workflows while minimizing friction and enabling productivity. • Experience leading complex investigations, high-severity incident response, and root-cause analysis related to email, endpoint and data compromise. • Proven ability to author technical standards, playbooks and design guidance that set direction for engineering teams and operational partners. • Exceptional communication skills, with the ability to clearly articulate technical risk, trade-offs, and recommendations to security leadership, IT stakeholders and business partners. • Must be willing to work weekends/off-shift hours, as needed during cybersecurity incidents. We would love it if you had: • Hands-on experience with enterprise security tools such as SIEM, SOAR, threat intelligence platforms and cloud security controls. • Ability to work independently with strong time management skills, consistently driving value and delivering results without direct supervision. • Commitment to continuous learning in an evolving cybersecurity landscape. What will your typical day look like? • Accountability for technical authority over Microsoft Defender for Office 365, Microsoft Defender for Endpoint, and Microsoft Purview, with enterprise-wide architecture, design and control decisions established and maintained. • Continuous analysis of threat trends, security telemetry, and control performance to ensure ongoing design, tuning and improvement of email, endpoint and data protection strategies. • Participation in and leadership of complex investigations and high-severity incidents, with advanced hunting, deep technical analysis and root-cause identification. • Close collaboration with response, intelligence, content, assurance, services, identity, IT, and business teams to ensure protection capabilities are embedded into day-to-day operations while supporting business productivity. • Development and maintenance of technical standards, reference architectures, and playbooks, promoting consistency, scalability and clarity across protection platforms. • Knowledge sharing and mentorship provided to engineers and practitioners, contributing to elevated engineering standards and technical maturity across