Senior / Firmware Security Engineer
Rockwell Automation4 days ago
Singapore, SingaporeSenior
Responsibilities
- Design, develop, debug, test, and maintain embedded firmware security features using C/C++.
- Implement Secure Boot, secure firmware updates, authentication, encryption, key management, certificate management, and secure communications.
- Conduct threat modeling, security reviews, risk assessments, static code analysis, penetration testing, and vulnerability remediation.
- Maintain traceability between requirements, implementation, and verification activities.
- Lead cybersecurity initiatives, influence architectural decisions, and act as a security subject matter expert.
- Investigate critical vulnerabilities and field-reported cybersecurity issues and drive resolution across multiple teams.
- Develop engineering processes, security verification methodologies, development standards, and secure development best practices.
- Mentor engineers and collaborate with firmware, hardware, systems, quality, and product security teams globally.
- Evaluate emerging cybersecurity technologies, industry trends, standards, and threats to inform product security strategies.
- Ensure compliance with quality systems, secure development processes, information protection policies, intellectual property requirements, and regulatory obligations.
Requirements
- Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or equivalent experience is required; a master's degree is preferred.
- At least 2 years of embedded firmware development experience and at least 2 years of experience in firmware security, cybersecurity engineering, or embedded product security.
- Demonstrated technical leadership across multiple products, projects, or technology platforms.
- Proficiency in embedded systems and real-time firmware development using C/C++.
- Experience with embedded security architecture, secure product development, Secure Boot, cryptography, PKI, secure firmware updates, secure storage, key management, security protocols, TCP/IP networking, and device authentication frameworks.
- Experience with threat modeling methodologies, security risk assessments, penetration testing, security assessment tools, and vulnerability management processes.
- Proficiency in Python or similar scripting languages.
- Experience with DevOps and security automation practices.
- Expertise in IEC 62443 and industrial cybersecurity frameworks is preferred.
- Security certifications such as CISSP, GICSP, CSSLP, GIAC, or equivalent are preferred.
- Experience with industrial control systems, industrial automation products, and organizational cybersecurity strategy and governance is preferred.
Benefits
- Comprehensive mindfulness programs with a premium Calm membership.
- Volunteer paid time off is available after 6 months of employment for eligible employees.
- Employee volunteer and donation matching program.
- Employee Assistance Program.
- Personalized wellbeing programs through the OnTrack program.
- On-demand digital course library for professional development.
- Hybrid work arrangement requiring work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless there is a business obligation out of the office.
About Rockwell Automation
Rockwell Automation builds industrial control hardware and factory software for manufacturers, and sells services and systems to design, operate, and maintain automated plants. Its Allen-Bradley controllers, drives, and safety products pair with FactoryTalk software and MES to support discrete and process industries. Founded in 1903 and headquartered in Milwaukee, it is a public company on the NYSE (ROK) with global sales, partners, and OEM customers.