Product Security Engineer

Emerson; Maharashtra; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Emerson is seeking a security-focused engineer to support regulatory compliance and secure development across embedded products. You will participate in audits, perform risk assessments, and drive vulnerability management as part of a collaborative global team.

The role requires strong C/C++ skills, experience with RTOS, Linux environments, and familiarity with industry standards such as IEC 62443 and NIST CSF. Collaboration with multiple business units is essential.

Qualifications

• Bachelor’s degree in Engineering, Computer Science, Information Security or related discipline or equivalent experience.
• Experience in product security, secure product development, cybersecurity governance or related domains.
• Understanding of Secure Development Lifecycle (SDL), Secure-by-Design and Defense-in-Depth principles.
• Knowledge of IEC 62443 and cybersecurity governance practices.
• Familiarity with CRA requirements.
• Experience with standards and frameworks like IEC 62443, ISO/IEC 27001, NIST SP 800-218, COBIT, or NIST CSF.
• Knowledge of SBOM concepts and implementation.
• Hands-on experience with static code analysis tools such as Coverity.
• Experience designing embedded systems using multitasking RTOS.
• Strong programming skills in C and C++.
• Familiarity with RTOS environments such as VxWorks, UCOS, ThreadX, FreeRTOS, or MQX.
• Knowledge of communications protocols RS232, SPI, I2C.
• Experience with Linux environments including U-Boot, Linux Kernel, GDB, and CMake.
• Understanding of embedded security best practices.
• Strong problem-solving, organizational, communication, and collaboration skills.

Responsibilities

• Support product security regulatory compliance activities (EU CRA).
• Represent product security to support SDL implementation.
• Participate in product development process audits and security assessments.
• Perform product security risk assessments and threat modeling.
• Identify, assess, prioritize, and help mitigate vulnerabilities and threats.
• Coordinate security scans and pen-testing and ensure remediation.
• Collaborate with business units to inventory products and support risk prioritization.
• Support vulnerability management and PSIRT activities.
• Assist in product security training and awareness initiatives.
• Maintain knowledge of IEC 62443, IEC 29147, IEC 30111, ISO/IEC 27001, and NIST SP 800-218.
• Participate in embedded software development projects; translate specs to software requirements.
• Design, develop, test, and maintain embedded software modules.
• Build cross-functional relationships to support product security objectives.

Skills

C/C++

RTOS

Linux

Embedded security

Threat modeling

Cybersecurity standards

SBOM concepts

Coverity

Communication protocols

Secure development lifecycle

Education

Bachelor's degree in Engineering, Computer Science, Information Security

Tools

Coverity

GDB

CMake

Job description

Job Description

Responsibilities

• Support product security regulatory compliance activities, including the European Cyber Resilience Act (EU CRA).
• Act as a product security representative to support secure development lifecycle implementation efforts.
• Participate in new product development process audits and security assessments.
• Perform product security risk assessments and threat modeling activities.
• Identify, assess, prioritize, and help mitigate vulnerabilities and security threats impacting products and solutions.
• Coordinate security scans and penetration testing activities, analyze results, and ensure remediation of identified vulnerabilities.
• Collaborate with business units to inventory products and support risk prioritization initiatives.
• Support vulnerability management programs and Product Security Incident Response Team activities.
• Assist in product security training and awareness initiatives.
• Maintain knowledge of applicable industry standards, including IEC 62443, IEC 29147, IEC 30111, ISO/IEC 27001, and NIST SP 800-218.
• Participate in embedded software development projects based on business requirements.
• Translate product specifications into software requirements.
• Design, develop, test, and maintain embedded software modules.
• Build collaborative relationships with product teams, organizational functions, and business partners to support product security objectives.

Who You Are

You pursue everything with energy, drive, and a strong commitment to delivering results. You consistently keep objectives in focus and take ownership to meet commitments and deadlines. You build effective partnerships and foster teamwork to achieve shared goals across functions. You earn the trust and support of others through collaboration and credibility. You ask insightful questions to analyze situations accurately and evaluate risks, benefits, and alternatives to make sound decisions.

Required Qualifications

• Bachelor’s degree in Engineering, Computer Science, Information Security, or a related discipline, or equivalent relevant experience.
• Experience in product security, secure product development, cybersecurity governance, or related domains.
• Understanding of Secure Development Lifecycle (SDL), Secure‑by‑Design, and Defense‑in‑Depth principles.
• Knowledge of IEC 62443 and cybersecurity governance practices.
• Familiarity with European Cyber Resilience Act (CRA) requirements.
• Experience with cybersecurity standards and frameworks such as IEC 62443, ISO/IEC 27001, NIST SP 800‑218, COBIT, or NIST Cybersecurity Framework.
• Knowledge of Software Bill of Materials (SBOM) concepts and implementation.
• Hands‑on experience with static code analysis tools such as Coverity.
• Experience designing embedded systems using multitasking real‑time operating systems (RTOS).
• Strong programming skills in C and C++.
• Familiarity with RTOS environments such as VxWorks, UCOS, ThreadX, FreeRTOS, or MQX.
• Knowledge of communication protocols such as RS232, SPI, and I2C.
• Experience with Linux environments, including U‑Boot, Linux Kernel, GDB, and CMake.
• Understanding of embedded security best practices.
• Strong problem‑solving, organizational, communication, and collaboration skills.

Preferred Qualifications

• Experience supporting cybersecurity regulatory compliance initiatives within industrial or embedded product environments.
• Knowledge of vulnerability management and product security incident response processes.
• Experience conducting threat modeling, penetration testing coordination, and security risk assessments.
• Exposure to industrial automation, embedded product development, or operational technology (OT) security.
• Ability to work effectively in global, cross‑functional teams and manage multiple priorities.