Product Security Engineer
Emerson Electric Co.2 months ago
Pune, IndiaMid Level / Senior
Responsibilities
- Execute product security controls including secure boot, firmware integrity checks, authentication, and vulnerability mitigation.
- Participate in firmware/software requirements analysis, documentation, threat modeling, and security deliverables.
- Perform integration, system, and regression testing for embedded products.
- Execute security test cases involving fuzzing, protocol security validation, cryptographic checks, and penetration testing.
- Conduct vulnerability scanning and document findings according to CVE/CWE standards.
- Validate security controls against IEC 62443-4-2 component requirements.
- Develop or support automated test scripts using Python and scripting.
- Analyze and validate the security of HART, Modbus, Ethernet/IP, and ProfiNet industrial communication protocols.
- Collaborate with cross-functional engineering teams.
Requirements
- Bachelor's or master's degree in computer science, electronics, instrumentation, or a related field.
- 4–6 years of experience in embedded systems, product verification and validation, or product security.
- Experience with firmware/hardware integration and security testing.
- Strong understanding of penetration testing methodologies and tools.
- Expertise in threat modeling and vulnerability analysis.
- Experience with vulnerability scanning tools such as Nessus, OpenVAS, or Qualys.
- Familiarity with fuzzing tools including AFL and libFuzzer.
- Knowledge of industrial protocol security, including HART and Modbus.
- Python scripting experience for test automation.
- Familiarity with OWASP Embedded Top 10 and CWE/CVE databases.
Benefits
- Competitive benefits plans and a variety of medical insurance plans.
- Employee Assistance Program and employee resource groups.
- Recognition programs, mentorship, training, and leadership opportunities.
- Flexible time off plans, including paid parental leave, vacation, and holiday leave.
- Inclusive and collaborative workplace culture with ongoing career development.
- Work arrangement and contract duration are not stated.
About Emerson Electric Co.
Emerson Electric Co. builds industrial automation hardware and software for manufacturers, energy and utilities, and other process-intensive industries. Its portfolio includes Fisher control valves, DeltaV and Ovation control systems, Rosemount measurement and sensing, and lifecycle services, with software partnerships and holdings such as AspenTech. Founded in 1890 and headquartered in St. Louis, it is a public company (NYSE: EMR) serving markets like energy, chemicals, life sciences, power, and food and beverage.