Senior Cybersecurity engineer

Responsibilities

• Respond to cloud security incidents and issues by identifying, triaging, and coordinating with remediation teams to ensure timely mitigation.
• Perform daily monitoring of the CNAPP platform to ensure timely response.
• Build new detections in CNAPP according to Wabtec technical controls and review existing controls against industry standards.
• Build leftshift controls to alert when resources are being created; design and automate reliable CI/CD pipelines integrating DevSecOps practices.
• Participate in cloud infrastructure evolution and modernization projects.
• Write and maintain technical documentation and procedures to ensure service quality.
• Work collaboratively with crossfunctional teams to describe and communicate risk associated with identified findings.
• Demonstrate excellent written and verbal communication skills to effectively document, present, and coordinate across global teams.

Required Skills & Qualifications

• Azure certifications.
• 6+ years of experience in Azure security or Azure administration.
• Bachelors degree in Computer Science, Cybersecurity, or Network Communications.
• Knowledge of Azure cloud security principles (Entra ID, RBAC, Key Vault, Defender, Policy).
• Understanding of vulnerability and exposure management (CVE, CVSS, etc.).
• Experience with CNAPP platforms such as Wiz or similar tools.
• Experience with scripting, automation, REST API, and ticketing integration.
• Understanding of Azure components:
  • Virtual Network, subnets, route tables, NSG
  • VPN Gateway / ExpressRoute
  • Azure Load Balancer / Application Gateway
  • Knowledge of Terraform and Rego.
• Experience working in international environments.
• Understanding of cloud security standards such as CIS Benchmarks.
• Strong communication and teamwork abilities to collaborate effectively across technical and nontechnical stakeholders.