Job description

Emerson’s Measurement Solutions business is seeking a Senior Product Security Engineer to provide product security leadership for industrial sensing, connectivity, software, and cloud programs. In this role, you will own product security for a portfolio that spans wireless field devices, WirelessHART gateways, Ethernet-APL connectivity platforms, monitoring platforms, and Plantweb Insight software and cloud solutions. These products bring pressure, temperature, flow, level, and other critical measurements from the field into control systems and analytics platforms for customers in oil and gas, chemical, pharmaceutical, and other critical industries. You will embed security into every phase of the product lifecycle, from architecture and design through release and post-market support, and help product teams meet the requirements of the EU Cyber Resilience Act (CRA) and IEC 62443. This is a high-impact, hands-on technical role with broad visibility across engineering, product management, quality, legal, and our global security test organization. In This Role, Your Responsibilities Will Be: • Serve as the Product Security Lead for assigned industrial automation products, connectivity platforms, software applications, and cloud solutions. • Drive secure development lifecycle (SDL) activities and ensure product security requirements are defined, implemented, and verified throughout the product development process. • Partner with hardware, firmware, software, and cloud engineering teams to design secure architectures and integrate cybersecurity best practices into products and solutions. • Lead cybersecurity risk assessments, threat modeling, and product security planning to identify and mitigate security risks. • Support security testing activities, including vulnerability assessments, penetration testing, code analysis, and remediation efforts. • Manage product security vulnerabilities and collaborate with cross-functional teams to investigate, prioritize, and resolve cybersecurity issues. • Support compliance with industry cybersecurity standards, regulations, certifications, and customer security requirements. • Provide technical guidance, training, and mentorship to engineering teams while promoting a strong culture of product cybersecurity. • Monitor emerging cybersecurity threats, technologies, and industry trends to continuously improve product security practices. Who You Are: You are a hands-on security technologist who enjoys learning the nuances of new technology and understanding how systems fit together securely. You quickly master complex, interconnected products, from embedded devices to the cloud, and can translate technical risk into clear, practical guidance for engineers and leaders. You build strong working relationships across functions and global teams, and you take ownership of results in a fast-moving regulatory environment. For This Role, You Will Need: • Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field. • 5+ years of experience in software, firmware, systems engineering, or cybersecurity, including experience supporting product or embedded/IoT security. • Knowledge of secure development lifecycle (SDL) practices, threat modeling, security risk assessments, vulnerability management, and secure design principles. • Familiarity with cybersecurity frameworks and standards, including CWE, CVE, CVSS, and OWASP. • Experience programming in languages such as C, C++, Java, or Python. • Working knowledge of Linux operating systems, networking fundamentals, and cybersecurity best practices. • Strong communication and collaboration skills with the ability to work effectively across global, cross-functional teams. • Legal authorization to work in the United States. • Authorized to work in the United States without sponsorship now and in the future. Individuals with temporary visas such as E, F-1 (including those with OPT or CPT), H-1, H-2, L-1, B, J or TN, or who need sponsorship for work authorization now or in the future, are not eligible for hire. Preferred Qualifications That Set You Apart: • Experience securing industrial automation, industrial IoT, or operational technology (OT) products and protocols. • Knowledge of industry cybersecurity standards and regulations, including IEC 62443, NIST SSDF, and the EU Cyber Resilience Act. • Experience with cloud and container security technologies, such as Azure, AWS, Docker, or Kubernetes. • Experience with penetration testing, fuzzing, vulnerability assessment, and code analysis tools. • Familiarity with SBOM standards, software supply chain security, and software composition analysis. • Industry certifications such as CISSP, CSSLP, GICSP, OSCP, or ISA/IEC 62443 Cybersecurity Expert. • Experience mentoring engineers and providing technical leadership on cybersecurity initiatives. Our Culture & Commitment to You: At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results. We recognize the importance of employee wellbeing and know that to do your best you must have flexible, competitive benefits plans to meet you and your family’s physical, mental, financial, and social needs. We provide, a variety of medical insurance plans, with dental and vision coverage, Employee Assistance Program, profit sharing retirement, tuition reimbursement, employee resource groups, recognition, and much more. Our culture prioritizes work-life balance and offers flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave. Our compensation philosophy is simple: we pay a competitive base salary, within the local market in which we operate, and reward performance during our annual merit review process. The salary range for this role is $115,000-$140,000 annually, commensurate with the skills, talent, capabilities, and experience each candidate brings to a role. #LI-SW1 #LI-Onsite Emerson’s Measurement Solutions business is seeking a Senior Product Security Engineer to provide product security leadership for industrial sensing, connectivity, software, and cloud programs. In this role, you will own product security for a portfolio that spans wireless field devices, WirelessHART gateways, Ethernet-APL connectivity platforms, monitoring platforms, and Plantweb Insight software and cloud solutions. These products bring pressure, temperature, flow, level, and other critical measurements from the field into control systems and analytics platforms for customers in oil and gas, chemical, pharmaceutical, and other critical industries. You will embed security into every phase of the product lifecycle, from architecture and design through release and post-market support, and help product teams meet the requirements of the EU Cyber Resilience Act (CRA) and IEC 62443. This is a high-impact, hands-on technical role. Authorized to work in the United States without sponsorship.

Requirements

Must-haves

Serve as the Product Security Lead for assigned industrial automation products, connectivity platforms, software applications, and cloud solutions.
Drive secure development lifecycle (SDL) activities and ensure product security requirements are defined, implemented, and verified throughout the product development process.
Partner with hardware, firmware, software, and cloud engineering teams to design secure architectures and integrate cybersecurity best practices into products and solutions.
Lead cybersecurity risk assessments, threat modeling, and product security planning to identify and mitigate security risks.
Support security testing activities, including vulnerability assessments, penetration testing, code analysis, and remediation efforts.
Manage product security vulnerabilities and collaborate with cross-functional teams to investigate, prioritize, and resolve cybersecurity issues.
Support compliance with industry cybersecurity standards, regulations, certifications, and customer security requirements.
Provide technical guidance, training, and mentorship to engineering teams while promoting a strong culture of product cybersecurity.
Monitor emerging cybersecurity threats, technologies, and industry trends to continuously improve product security practices.
Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field.
5+ years of experience in software, firmware, systems engineering, or cybersecurity, including experience supporting product or embedded/IoT security.
Knowledge of secure development lifecycle (SDL) practices, threat modeling, security risk assessments, vulnerability management, and secure design principles.
Familiarity with cybersecurity frameworks and standards, including CWE, CVE, CVSS, and OWASP.
Experience programming in languages such as C, C++, Java, or Python.
Working knowledge of Linux operating systems, networking fundamentals, and cybersecurity best practices.
Strong communication and collaboration skills with the ability to work effectively across global, cross-functional teams.
Legal authorization to work in the United States.
Experience securing industrial automation, industrial IoT, or operational technology (OT) products and protocols.
Knowledge of industry cybersecurity standards and regulations, including IEC 62443, NIST SSDF, and the EU Cyber Resilience Act.
Experience with cloud and container security technologies, such as Azure, AWS, Docker, or Kubernetes.
Experience with penetration testing, fuzzing, vulnerability assessment, and code analysis tools.
Familiarity with SBOM standards, software supply chain security, and software composition analysis.
Industry certifications such as CISSP, CSSLP, GICSP, OSCP, or ISA/IEC 62443 Cybersecurity Expert.
Experience mentoring engineers and providing technical leadership on cybersecurity initiatives.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

javapythonazureawsdockerkubernetes

Platform: oracle-cloud
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

Parental Leave