Staff Firmware Security Engineer
Rockwell Automation21 hours ago
Singapore, SingaporeStaff+
Responsibilities
- Lead cybersecurity architecture, design, and implementation across embedded and industrial automation product platforms.
- Define cybersecurity strategies and integrate secure-by-design principles throughout the product development lifecycle.
- Provide technical leadership for secure boot, secure firmware updates, cryptographic key and certificate management, device identity, authentication, secure communications, vulnerability management, product hardening, and security monitoring.
- Lead architecture reviews, threat modeling, security risk assessments, vulnerability investigations, remediation programs, and product security improvements.
- Drive compliance with IEC 62443, NIST, ISA/IEC industrial security requirements, and secure development lifecycle processes.
- Partner with product security, firmware, systems, hardware, and quality teams to influence product architectures and technology roadmaps.
- Develop engineering processes, security verification methods, development standards, and cybersecurity best practices.
- Mentor firmware and cybersecurity engineers and build organizational cybersecurity capabilities.
- Lead product security certification efforts and technical engagements with customers, security researchers, certification bodies, and industry working groups.
- Influence project planning, technology investments, resource prioritization, and security roadmap execution across globally distributed teams.
Requirements
- Bachelor's degree in computer science, computer engineering, electrical engineering, or a related field.
- At least 7 years of embedded firmware development experience, including at least 5 years in firmware security or embedded cybersecurity.
- Demonstrated technical leadership across products or platforms and experience influencing architecture decisions.
- Expertise in C/C++ and real-time embedded systems.
- Expertise in secure boot, cryptography and PKI, secure firmware updates, secure storage, key and certificate management systems, security protocols, TCP/IP networking, and device authentication frameworks.
- Experience with threat modeling, security risk assessments, penetration testing, and vulnerability management.
- Proficiency in Python or similar scripting languages.
- Familiarity with DevSecOps and security automation practices.
- Preferred knowledge of IEC 62443 and industrial cybersecurity standards.
- Preferred security certifications include CISSP, GICSP, CSSLP, GIAC, or equivalent.
- Preferred experience with industrial control systems, industrial automation products, cybersecurity strategy, and governance.
Benefits
- Comprehensive mindfulness programs with premium Calm membership.
- Volunteer paid time off available after six months of employment for eligible employees.
- Company volunteer and donation matching program.
- Employee Assistance Program.
- Personalized wellbeing programs through the OnTrack program.
- On-demand digital course library for professional development.
- Hybrid work policy requiring employees to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have an off-site business obligation.
About Rockwell Automation
Rockwell Automation builds industrial control hardware and factory software for manufacturers, and sells services and systems to design, operate, and maintain automated plants. Its Allen-Bradley controllers, drives, and safety products pair with FactoryTalk software and MES to support discrete and process industries. Founded in 1903 and headquartered in Milwaukee, it is a public company on the NYSE (ROK) with global sales, partners, and OEM customers.