Product Security Engineer

Emerson; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Emerson is seeking an experienced embedded security professional in Pune, India, to strengthen product security through secure boot, vulnerability mitigation, and protocol validation. You will contribute to requirement analysis, threat modeling, and regression testing of embedded firmware/software.

The role requires hands-on practice with penetration testing, vulnerability analysis, fuzzing tools, and Python scripting to automate tests and validate security controls across IEC 62443-4-2

Qualifications

• Experience with firmware/hardware integration and security testing.
• Strong understanding of penetration testing methodologies and tools.
• Threat modeling and vulnerability analysis expertise.
• Experience with vulnerability scanning tools such as Nessus, OpenVAS, or Qualys.
• Familiarity with fuzzing tools (AFL, libFuzzer).
• Knowledge of industrial protocol security (HART, Modbus).
• Python scripting for test automation.
• Familiarity with OWASP Embedded Top 10 and CWE/CVE databases.

Responsibilities

• Execute product security controls such as secure boot, firmware integrity checks, authentication, and vulnerability mitigation.
• Participate in firmware/software requirement analysis, documentation, and threat modeling activities.
• Perform integration, system, and regression testing for embedded products.
• Execute security test cases including fuzzing, protocol security validation, and cryptographic checks.
• Conduct vulnerability scanning and document findings as per CVE/CWE standards.
• Validate security controls against IEC 62443-4-2 component requirements.
• Support development of automated test scripts using Python/scripting.
• Analyze and validate industrial communication protocol security (HART, Modbus, Ethernet/IP, ProfiNet).
• Collaborate with cross-functional engineering teams to support security deliverables.

Skills

Firmware integration

Security testing

Penetration testing

Threat modeling

Vulnerability analysis

Python scripting

OWASP Embedded Top 10

Education

Bachelor's or Master's degree in computer science / Electronics / Instrumentation or related field

Tools

Nessus

OpenVAS

Qualys

AFL

libFuzzer

HART/Modbus protocols

Job description

In this Role, your responsibilities will be:

• Execute product security controls such as secure boot, firmware integrity checks, authentication, and vulnerability mitigation.

• Participate in firmware/software requirement analysis, documentation, and threat modeling activities.

• Perform integration, system, and regression testing for embedded products.

• Execute security test cases including fuzzing, protocol security validation, and cryptographic checks.

• Conduct vulnerability scanning and document findings as per CVE/CWE standards.

• Validate security controls against IEC 62443-4-2 component requirements.

• Support development of automated test scripts using Python/scripting.

• Analyze and validate industrial communication protocol security (HART, Modbus, Ethernet/IP, ProfiNet).

• Collaborate with cross-functional engineering teams to support security deliverables.

WHO YOU ARE

You demonstrate strong energy, ownership, and a bias for action, balancing disciplined planning with effective execution. You show learning agility by quickly acquiring new skills, applying feedback, and strengthening core engineering fundamentals. You approach problems with structured thinking and sound engineering judgment to deliver practical solutions. You collaborate effectively across teams, leverage expertise when needed, and operate independently with accountability to deliver results.

For This Role, You Will Need:

• Bachelor's or Master's degree incomputer science / Electronics/ Instrumentation or related field

• Overall 4-6 yrs of experience in embedded systems or product Verification and Validation and Product Security

Required Qualifications:

• Experience with firmware/hardware integration and security testing.

• Strong understanding of penetration testing methodologies and tools.

• Threat modeling and vulnerability analysis expertise.

• Experience with vulnerability scanning tools such as Nessus, OpenVAS, or Qualys.

• Familiarity with fuzzing tools (AFL, libFuzzer).

• Knowledge of industrial protocol security (HART, Modbus).

• Python scripting for test automation.

• Familiarity with OWASP Embedded Top 10 and CWE/CVE databases.

Our Culture & Commitment to You

At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives- because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results.

We recognize the importance of employee wellbeing. We prioritize providing competitive benefits plans, a variety of medical insurance plans, Employee Assistance Program, employee resource groups, recognition, and much more. Our culture offers flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave.

Requisition ID : 25030506

Emerson is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, age, marital status, political affiliation, sexual orientation, gender identity, genetic information, disability or protected veteran status. We are committed to providing a workplace free of any discrimination or harassment.