Product Security Engineer
Emerson Electric Co.14 days ago
Pune, IndiaMid Level / Senior
Responsibilities
- Execute product security controls including secure boot, firmware integrity checks, authentication, and vulnerability mitigation.
- Participate in firmware/software requirements analysis, documentation, threat modeling, and security deliverables.
- Perform integration, system, and regression testing for embedded products.
- Execute security test cases involving fuzzing, protocol security validation, cryptographic checks, and penetration testing.
- Conduct vulnerability scanning and document findings according to CVE/CWE standards.
- Validate security controls against IEC 62443-4-2 component requirements.
- Develop or support automated test scripts using Python and scripting.
- Analyze and validate the security of HART, Modbus, Ethernet/IP, and ProfiNet industrial communication protocols.
- Collaborate with cross-functional engineering teams.
Requirements
- Bachelor's or master's degree in computer science, electronics, instrumentation, or a related field.
- 4–6 years of experience in embedded systems, product verification and validation, or product security.
- Experience with firmware/hardware integration and security testing.
- Strong understanding of penetration testing methodologies and tools.
- Expertise in threat modeling and vulnerability analysis.
- Experience with vulnerability scanning tools such as Nessus, OpenVAS, or Qualys.
- Familiarity with fuzzing tools including AFL and libFuzzer.
- Knowledge of industrial protocol security, including HART and Modbus.
- Python scripting experience for test automation.
- Familiarity with OWASP Embedded Top 10 and CWE/CVE databases.
Benefits
- Competitive benefits plans and a variety of medical insurance plans.
- Employee Assistance Program and employee resource groups.
- Recognition programs, mentorship, training, and leadership opportunities.
- Flexible time off plans, including paid parental leave, vacation, and holiday leave.
- Inclusive and collaborative workplace culture with ongoing career development.
- Work arrangement and contract duration are not stated.