Senior / Firmware Security Engineer
Rockwell Automation21 hours ago
Singapore, SingaporeSenior
Responsibilities
- Design, develop, debug, test, and maintain embedded firmware security features using C/C++.
- Implement Secure Boot, secure firmware updates, authentication, encryption, key management, certificate management, and secure communications.
- Develop threat models, conduct security reviews and risk assessments, and remediate vulnerabilities.
- Perform static code analysis and fix identified issues.
- Maintain traceability among requirements, implementation, and verification activities.
- Lead cybersecurity initiatives, influence architectural decisions, mentor engineers, and act as a security subject matter expert.
- Investigate critical vulnerabilities and field-reported cybersecurity issues and drive resolution across teams.
- Improve engineering processes, security verification methodologies, development standards, and secure development practices.
- Evaluate emerging cybersecurity technologies, standards, industry trends, and threats to inform product security strategy.
- Collaborate with global firmware, hardware, systems, quality, and product security teams.
- Ensure compliance with quality systems, secure development processes, information protection policies, intellectual property requirements, and regulatory obligations.
Requirements
- Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or equivalent is required; a master's degree is preferred.
- At least 2 years of embedded firmware development experience is required.
- At least 2 years of experience in firmware security, cybersecurity engineering, or embedded product security is required.
- Candidates with more than 4 years of embedded security development experience might be offered a Senior Engineer position.
- Demonstrated technical leadership across multiple products, projects, or technology platforms.
- Experience leading cybersecurity initiatives and influencing architectural decisions.
- Proficiency in embedded systems and real-time firmware development using C/C++.
- Knowledge of embedded security architecture, secure product development, Secure Boot, cryptography, PKI, secure firmware updates, secure storage, key management systems, security protocols, TCP/IP networking, and device authentication frameworks.
- Experience with threat modeling methodologies, security risk assessments, penetration testing, security assessment tools, and vulnerability management processes.
- Proficiency in Python or similar scripting languages.
- Experience with DevOps and security automation practices.
- Preferred qualifications include IEC 62443 and industrial cybersecurity framework expertise, security certifications such as CISSP, GICSP, CSSLP, or GIAC, industrial control systems or industrial automation experience, and experience influencing cybersecurity strategy and governance.
Benefits
- Comprehensive mindfulness programs with a premium Calm membership.
- Volunteer paid time off available after 6 months of employment for eligible employees.
- Employee volunteer and donation matching program.
- Employee Assistance Program.
- Personalized wellbeing programs through the OnTrack program.
- On-demand digital course library for professional development.
- Hybrid work arrangement requiring employees to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have an off-site business obligation.
About Rockwell Automation
Rockwell Automation builds industrial control hardware and factory software for manufacturers, and sells services and systems to design, operate, and maintain automated plants. Its Allen-Bradley controllers, drives, and safety products pair with FactoryTalk software and MES to support discrete and process industries. Founded in 1903 and headquartered in Milwaukee, it is a public company on the NYSE (ROK) with global sales, partners, and OEM customers.