Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Quick apply
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
Cyber Security Tutor
Erie, PA · Remote
$18 - $40/hr
Deep knowledge of network security, cryptography, threat analysis, vulnerability assessment, security protocols, firewalls, intrusion detection systems, incident response, ethical hacking, and ...
Cyber Security Tutor
Erie, PA · Remote
$18 - $40/hr
Deep knowledge of network security, cryptography, threat analysis, vulnerability assessment, security protocols, firewalls, intrusion detection systems, incident response, ethical hacking, and ...
Security Design Engineer
Erie, PA · On-site +1
$70K - $112K/yr
Participates in and assists senior staff with conducting on-going risk analysis and physical security audits at all ERIE facilities and corporate functional areas to identify points of vulnerability.
Security Design Engineer
Erie, PA · On-site +1
$70K - $112K/yr
Participates in and assists senior staff with conducting on-going risk analysis and physical security audits at all ERIE facilities and corporate functional areas to identify points of vulnerability.
Security Design Engineer
Erie, PA · On-site
$70K - $112K/yr
Participates in and assists senior staff with conducting on-going risk analysis and physical security audits at all ERIE facilities and corporate functional areas to identify points of vulnerability.
Security Design Engineer
Erie, PA · On-site
$70K - $112K/yr
Participates in and assists senior staff with conducting on-going risk analysis and physical security audits at all ERIE facilities and corporate functional areas to identify points of vulnerability.
Weekend Vulnerability Analyst information
What is a Weekend Vulnerability Analyst?
A Weekend Vulnerability Analyst is a cybersecurity professional who specializes in identifying, assessing, and reporting security vulnerabilities within an organization's systems and networks, specifically during weekend hours. Their primary responsibilities include conducting vulnerability scans, monitoring for new threats, analyzing security alerts, and collaborating with IT teams to remediate discovered weaknesses. These analysts play a crucial role in ensuring continuous protection against cyber threats, even outside the standard workweek. Their work helps organizations maintain a strong security posture and meet compliance requirements.
What are the key skills and qualifications needed to thrive as a Weekend Vulnerability Analyst?
To thrive as a Weekend Vulnerability Analyst, you need strong knowledge of cybersecurity principles, vulnerability assessment methodologies, and a background in IT or computer science, often supported by certifications like CompTIA Security+ or CEH. Familiarity with tools such as Nessus, Qualys, or OpenVAS, as well as experience with SIEM systems, is typically required. Analytical thinking, attention to detail, and effective communication are standout soft skills for this role. These skills and qualities are crucial for accurately identifying, reporting, and helping to remediate security vulnerabilities, especially during off-hours when quick, independent decision-making is essential.
What are the typical challenges faced by a Weekend Vulnerability Analyst, and how can they be addressed?
Weekend Vulnerability Analysts often face the challenge of limited real-time collaboration with other team members and stakeholders, as most staff work standard weekday hours. This can make incident escalation and remediation coordination more complex. To address these challenges, strong documentation skills, clear communication protocols, and proactive planning are essential. Additionally, weekend analysts often have more autonomy, which provides opportunities to take initiative and demonstrate problem-solving abilities, potentially leading to faster career growth.
What is the difference between Weekend Vulnerability Analyst vs Cybersecurity Technician?
| Aspect | Weekend Vulnerability Analyst | Cybersecurity Technician |
|---|---|---|
| Certifications | CompTIA Security+, CEH (Certified Ethical Hacker) | CompTIA Security+, Network+ |
| Work Environment | Part-time, weekend-focused security assessments | Full-time, technical support and security maintenance |
| Industry Usage | IT security firms, corporate security teams | IT departments, managed service providers |
| Job Focus | Identifying vulnerabilities, security testing | Implementing security measures, troubleshooting |
The Weekend Vulnerability Analyst primarily focuses on identifying security weaknesses during weekends, often performing vulnerability scans and assessments. In contrast, a Cybersecurity Technician handles broader security tasks, including implementing security protocols and troubleshooting issues. While both roles require security certifications and work within the IT security industry, their responsibilities and work schedules differ significantly.
What are the most commonly searched types of Vulnerability Analyst jobs in Erie, PA?
The most popular types of Vulnerability Analyst jobs in Erie, PA are:
What are popular job titles related to Weekend Vulnerability Analyst jobs in Erie, PA?
For Weekend Vulnerability Analyst jobs in Erie, PA, the most frequently searched job titles are:
What job categories do people searching Weekend Vulnerability Analyst jobs in Erie, PA look for?
The top searched job categories for Weekend Vulnerability Analyst jobs in Erie, PA are:
What cities near Erie, PA are hiring for Weekend Vulnerability Analyst jobs?
Cities near Erie, PA with the most Weekend Vulnerability Analyst job openings:
Full-time
Medical, Retirement
Posted 13 days ago
Job description
Job Description
Summary:
The Cybersecurity Engineer is responsible for ongoing cybersecurity assessments of Wabtec products to determine whether they comply with applicable Wabtec cybersecurity standards and technical controls. They will advise product managers and engineering teams, create awareness of cybersecurity standards and technical controls, and recommend best practices for satisfying these standards and controls for all Wabtec products offered or made available for customer. They will work closely with others to define and maintain technical controls to address external standards, Wabtec standards, and product requirements.
Duties and Responsibilities:
This position requires strong technical expertise in cybersecurity controls for mainly web and embedded systems.
Key responsibilities include:
- Conduct cybersecurity reviews and assessments of Wabtec products throughout the Software Development Lifecycle (SDLC), evaluating compliance with Wabtec policies, standards, and technical controls.
- Partner with engineering teams to perform threat modeling, threat and risk assessments, and security analyses to identify vulnerabilities, attack vectors, and product threat surface
- Provide expert guidance on cybersecurity principles, technologies, and risk management, clearly communicating technical concepts to engineering teams, leadership, and non-technical stakeholders.
- Support cybersecurity consulting activities across Wabtec's connected products, web service, industrial systems and embedded product portfolios.
- Recommend secure design principles, software security controls, hardening strategies, and risk mitigation measures that reduce attack-surface while ensuring maintainability and operational efficiency.
- Support engineering teams in investigating cybersecurity defects, performing root cause analyses, and implementing corrective and preventive actions.
- Develop and deliver cybersecurity training and awareness programs for engineers, technical leaders, product managers, and business stakeholders.
- Contribute to the development, documentation, and continuous improvement of cybersecurity standards, procedures, technical controls, and best practices.
- Promote and share cybersecurity best practices across the organization to improve product security maturity and consistency.
- Collaborate with product development teams to integrate cybersecurity requirements into product architectures, designs, and development processes.
- Support vulnerability disclosure, remediation planning, and security incident response activities related to product cybersecurity.
- Perform other duties and special projects as assigned.
Minimum Qualifications:
- Bachelor's degree in Computer Science, Cybersecurity, or a related field.
- 8 - 10 years of experience in the design, development, and testing of web-based, embedded, and/or connected systems.
- 4+ years of hands-on experience in product/application cybersecurity engineering, architecture, risk assessment, or risk management.
- Hands-on experience with security risk assessment methodologies, techniques, and tools, including threat modeling, attack surface analysis, vulnerability assessments, and security testing.
- Experience applying cybersecurity frameworks, regulations, and standards such as IEC 62443, NIST 800-53, NIST Cybersecurity Framework (CSF), ISO/IEC 27001, or equivalent.
- Experience in industrial sectors such as rail, transportation, mining, automotive, manufacturing, or critical infrastructure is preferred.
- Experience with secure product development processes and DevSecOps practices.
- Experience in security architecture and implementing cryptographic technologies, including PKI, secure boot, key management, certificate lifecycle management, and secure communications.
- Ability to work independently and effectively manage multiple priorities in a global, matrixed organization.
- Strong analytical, organizational, and problem-solving skills.
- Excellent verbal, written, presentation, and stakeholder management skills.
- Ability to manage multiple tasks while collaborating with diverse stakeholders in an international environment.
- Proven ability to influence technical decisions and drive cybersecurity improvements across global teams and external partners.
- Strong collaboration skills with engineering, product management, customers, suppliers, and leadership teams.
- Demonstrated commitment to continuous improvement, operational excellence, and cybersecurity maturity.
- Current knowledge of evolving cybersecurity threats, technologies, and industry trends
This role is focused on Product Cybersecurity Engineering, including threat modeling, security architecture reviews, embedded/IoT security, secure product design, and cybersecurity compliance. Candidates whose experience is primarily in IT Security, SOC, Information Security, Network Security, Data Security, Governance/Risk/Compliance (GRC), or Penetration Testing may not be a suitable match for this position.
Additional Information
Our job titles may span more than one career level. The salary rate for this role is currently $91000-129800 The actual salary offered to a candidate may be influenced by a variety of factors, such as: training, transferable skills, work experience, education, business needs, market demands and work location. The base pay range is subject to change and may be modified in the future. More information on offered benefits, which include health, welfare, and retirement, are available at mywabtecbenefits.com. Other benefit offerings for this role may include annual bonus, if eligible.
What could you accomplish in a place that puts People First?
At Wabtec, it's not just about a job - it's about the impact you make. When our people come together, we're Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.
If you're ready to revolutionize how the world moves for future generations, Wabtec is the place for you.
Who are we?
Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it's freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together - are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.
Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We're lifelong learners, obsessed with better. Learn more at www.WabtecCorp.com.
Culture powers us and the possibilities.
We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We're building a culture where leadership, inclusion and your unique perspective fuel progress.
We're proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.
Need accommodation? Just let us know - we've got you.