Staff Firmware Security Engineer
Rockwell Automation3 days ago
Singapore (city not specified)Staff+
Responsibilities
- Lead the architecture, design, and implementation of cybersecurity solutions across embedded and industrial automation product platforms.
- Define product cybersecurity strategies and integrate secure-by-design principles throughout the product development lifecycle.
- Provide technical leadership for secure boot, secure firmware updates, cryptographic key and certificate management, device identity and authentication, secure communications, vulnerability management, product hardening, and security monitoring and logging.
- Lead cybersecurity architecture reviews, threat modeling, security risk assessments, mitigation planning, and vulnerability remediation programs.
- Guide compliance with IEC 62443, NIST, ISA/IEC industrial security requirements, and internal secure development lifecycle processes.
- Partner with product security, firmware, systems, hardware, and quality organizations to influence product architectures and technology roadmaps.
- Provide expertise in secure coding, threat mitigation, cryptography, embedded security, and industrial cybersecurity practices.
- Lead investigations of critical security vulnerabilities and field-reported cybersecurity issues across multiple teams.
- Develop engineering processes, security verification methodologies, development standards, and cybersecurity best practices.
- Mentor firmware and cybersecurity engineers and build organizational cybersecurity capabilities.
- Evaluate cybersecurity technologies, industry trends, standards, and threats to shape future product security strategies.
- Lead product security certification efforts and technical engagements with customers, security researchers, certification bodies, and industry working groups.
- Influence project planning, technology investments, resource prioritization, and security roadmap execution.
- Facilitate technical agreement across globally distributed development organizations while ensuring quality, secure development, information protection, intellectual property, and regulatory compliance.
Requirements
- Bachelor's degree in computer science, computer engineering, electrical engineering, or a related field.
- At least 7 years of embedded firmware development experience, including at least 5 years in firmware security or embedded cybersecurity.
- Demonstrated technical leadership across products or platforms and experience driving cybersecurity initiatives and influencing architecture decisions.
- Expertise in C/C++ and real-time embedded systems.
- Expertise in secure boot, cryptography and PKI, secure firmware updates, secure storage, key and certificate management systems, security protocols, TCP/IP networking, and device authentication frameworks.
- Experience with threat modeling, security risk assessments, penetration testing, and vulnerability management.
- Proficiency in Python or similar scripting languages.
- Familiarity with DevSecOps and security automation practices.
- Preferred qualifications include knowledge of IEC 62443 and industrial cybersecurity standards; security certifications such as CISSP, GICSP, CSSLP, GIAC, or equivalent; experience with industrial control systems and industrial automation products; and experience contributing to cybersecurity strategy and governance.
Benefits
- Comprehensive mindfulness programs with premium Calm membership.
- Paid volunteer time off available after six months of employment for eligible employees.
- Company volunteer and donation matching program.
- Employee Assistance Program.
- Personalized wellbeing programs through OnTrack.
- On-demand digital course library for professional development.
- Hybrid work policy requiring employees to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have an off-site business obligation.
About Rockwell Automation
Rockwell Automation builds industrial control hardware and factory software for manufacturers, and sells services and systems to design, operate, and maintain automated plants. Its Allen-Bradley controllers, drives, and safety products pair with FactoryTalk software and MES to support discrete and process industries. Founded in 1903 and headquartered in Milwaukee, it is a public company on the NYSE (ROK) with global sales, partners, and OEM customers.