Emerson Electric

Builds industrial automation tools and software

Senior Cybersecurity Engineer

Offensive Security & TestingConfirmed live in the last 24 hours

Full-timePune, Maharashtra, IndiaNo salary listedIn-person

About the Job

Requirements

A bachelor's degree or equivalent years of relevant experience is required.
Three to five years of experience and familiarity with product security standards and initiatives, or practical work experience related to verification and validation of products, services, and solutions, is required.
Knowledge of cybersecurity standards and frameworks including IEC 62443, ISO 27001, NIST, and OWASP is required.
Familiarity with risk assessment methodologies and CVSS scoring is required.
Experience in secure-by-design principles and practices, and integrating security into existing development practices, is required.
Familiarity with the secure development lifecycle, secure-by-design principles, and defense in depth is required.
Familiarity with Microsoft Office tools for communications and information management is required.
Ability to organize, prepare, and deliver presentations is required.
Strong problem-solving and interaction-management skills are required.
Strong organizational and collaboration skills are required.
Respect for the company's values and ethics is required.

Responsibilities

Work under the direction of the BU Product Security Officer or Lead.
Create security test plans and associated test artifacts to support BU product certification efforts.
Own security verification and validation activities for all products and execute security requirement testing, threat mitigation testing, static code analysis, attack surface analysis, and software composition analysis for every major and minor release.
Coordinate with the independent penetration test team (GCC) on abuse-case and fuzz testing, known-vulnerability scanning, penetration testing, and PSIRT-specific testing.
Support the development team in validating fixes before sharing builds with the independent penetration test team.
Collaborate with the Product Security Engineer on PSIRT and vulnerability management activities.
Generate project metrics in accordance with EIC-Pune and/or Business Unit guidelines.
Report all activities to the local manager.
Contribute to EIC-Pune-assigned initiatives.
Work in the engineering laboratory on product- and system-level testing while following safety practices and guidelines.
Apply threat modeling, risk assessment, and security validation in CI/CD pipelines while ensuring compliance with industry cybersecurity standards and helping ensure embedded products are resilient against real-world attacks.

Desired Qualifications

Experience in industrial control systems, embedded systems, or network security is preferred.
A master's degree or equivalent experience in electronics engineering or a related field is preferred.
Familiarity with penetration-testing tools such as Metasploit, Wireshark, and Burp Suite is preferred.
Familiarity with hardware design and debugging is preferred.
Understanding of network protocols such as TCP/IP, HTTPS, SSH, SNMP, OPC-UA, and MQTT is preferred.
Understanding of firewalls, IDS/IPS, endpoint security, and access control systems is preferred.
Experience with secure coding practices and code review processes is preferred.
Prior experience in the industrial or factory automation or control systems industry is preferred.

In This Role, Your Responsibilities Will Be:

Work as per the direction from BU Product Security Officer / Lead.
Create security test plan and associated test artefacts to support BU Product Certification efforts.
Own Security Verification and Validation activity for all products and execute the tests below for every major and minor release:
- Security requirement testing
- Threat Mitigation testing
- Static Code Analysis
- Attack surface analysis
- Software composition analysis
Coordinate with independent penetration test team (GCC) for:
- Abuse case / Fuzz testing
- Known Vulnerability scanning
- Penetration test
- PSIRT specific test
Support development team for validating fixes prior to sharing build with independent penetration test team.
Collaborate with Product Security engineer for handling PSIRT and vulnerability management activities.
Generate Project Metrics as per EIC-Pune and / or Business Unit Guidelines
Report Local Manager for All the activities
Contribute to EIC-Pune Assigned Initiatives
Should be able to work in Engineering Laboratory for Product & System Level Testing following Safety Practices & Guidelines.

Who You Are:

As a Product Security Verification and Validation Engineer, you are proficient in threat modeling, risk assessment, and integrating security validation into CI/CD pipelines while ensuring compliance with industry cybersecurity standards. You ensure embedded products are resilient against real-world attacks while meeting regulatory and industry cybersecurity standards.

For This Role, You Will Need:

Bachelor's degree and/or equivalent years of relative experience.
3-5 years of experience and familiarity with product security standards and initiatives or practical work experience related to the verification and validation of products, services, and solutions.
Knowledge of cybersecurity standards and frameworks (IEC 62443, ISO 27001, NIST, OWASP).
Familiarity with risk assessment methodologies and CVSS scoring.
Experience in industrial control systems (ICS), embedded systems, or network security is preferred.
Experience in secure by design principles, best practices and the integration of security into preexisting development practices.
Familiar with concepts such as secure development lifecycle, secure by design, and defense in depth.
Familiar with Microsoft Office tools for effective communications and information management.
Ability to organize, prepare and make compelling presentations.
Self-motivated and able to work under tight timeline.
Strong problem solving / interaction management skills.
Strong organizational and collaboration skills.
Respect Company’s Values and Ethics.

Preferred Qualifications That Set You Apart:

Master’s degree or equivalent experience in electronics engineering or related field.
Familiarity with penetration testing tools (e.g., Metasploit, Wireshark, Burp Suite).
Familiarity with hardware design and debugging.
Understanding of network protocols (TCP/IP, HTTPS, SSH, SNMP, OPC-UA, MQTT).
Understanding of firewalls, IDS/IPS, endpoint security, and access control systems.
Experience with secure coding practices and code review processes.
Prior experience in the industrial/ factory automation or control systems industry.

Our Culture & Commitment to You:

At Emerson, we are committed to fostering a culture where every employee is valued and respected for their unique experiences and perspectives. We believe a diverse and inclusive work environment contributes to the rich exchange of ideas and diversity of thoughts, that inspires innovation and brings the best solutions to our customers.
This philosophy is fundamental to living our company’s values and our responsibility to leave the world in a better place. Learn more about our Culture & Values and about Diversity, Equity & Inclusion at Emerson.
If you have a disability and are having difficulty accessing or using this website to apply for a position, please contact: [email protected].

About the Company

Emerson Electric

Builds industrial automation tools and software

Emerson Electric builds automation equipment and software for organizations that operate factories, utilities, and industrial facilities. Its instruments measure conditions such as pressure and flow, while valves, controllers, and software help operators regulate processes and track equipment performance. DeltaV manages industrial control systems, and the company also develops test and measurement tools used to validate electronic products. Customers pay for equipment, software licenses, and services that support installation, maintenance, and operation across a plant's life. Emerson was founded in 1890 and is headquartered in Clayton, Missouri, in the St. Louis area.

Company size: 10,001+
Company stage: IPO
Headquarters: Clayton, MO
Founded: 1890

Recently Posted Jobs

Explore more opportunities at Emerson Electric

See more jobs