Product Security Engineer

Emerson Electric Co; Pune District; On-site; INR 700,000 - 1,100,000; Full time

Job summary

Emerson Electric Co. in Pune, India, is seeking an embedded product security engineer to drive secure development and regulatory compliance for industrial products.

You will perform risk assessments, threat modeling, and coordinate vulnerability management across product teams, with a focus on SDL, SBOM, and embedded Linux environments.

Qualifications

• Bachelor-level engineering or equivalent experience.
• Experience in product security, SDL/secure-by-design.
• Familiarity with CRA, IEC 62443, ISO 27001, NIST SP 800-218.
• Strong embedded software development experience.

Responsibilities

• Support EU CRA regulatory compliance activities.
• Represent product security in secure development lifecycle efforts.
• Participate in product development audits and security assessments.
• Perform product security risk assessments and threat modeling.
• Identify and help mitigate vulnerabilities affecting products.
• Coordinate scans and penetration testing, analyze results, ensure remediation.
• Collaborate to inventory products and prioritize risks.
• Support vulnerability management and PSIRT activities.
• Assist in product security training and awareness.
• Maintain knowledge of IEC 62443, 29147, 30111, ISO 27001, and NIST SP 800-218.
• Participate in embedded software projects; translate specs to software requirements.
• Design, develop, test, and maintain embedded software modules.
• Build relationships to support security objectives.

Skills

C/C++

Embedded RTOS

Linux

Threat modeling

Vulnerability management

Communication skills

Education

Bachelor's degree in Engineering/Computer Science/Info Security

Tools

Coverity

GDB

CMake

Job description

In This Role, Your Responsibilities Will Be:

• Support product security regulatory compliance activities, including the European Cyber Resilience Act (EU CRA).
• Act as a product security representative to support secure development lifecycle implementation efforts.
• Participate in new product development process audits and security assessments.
• Perform product security risk assessments and threat modeling activities.
• Identify, assess, prioritize, and help mitigate vulnerabilities and security threats impacting products and solutions
• Coordinate security scans and penetration testing activities, analyze results, and ensure remediation of identified vulnerabilities.
• Collaborate with business units to inventory products and support risk prioritization initiatives.
• Support vulnerability management programs and Product Security Incident Response Team activities.
• Assist in product security training and awareness initiatives.
• Maintain knowledge of applicable industry standards, including IEC 62443, IEC 29147, IEC 30111, ISO/IEC 27001, and NIST SP 800-218.
• Participate in embedded software development projects based on business requirements.
• Translate product specifications into software requirements.
• Design, develop, test, and maintain embedded software modules
• Build collaborative relationships with product teams, organizational functions, and business partners to support product security objectives.

Who You Are:

You pursue everything with energy, drive, and a strong commitment to delivering results. You consistently keep objectives in focus and take ownership to meet commitments and deadlines. You build effective partnerships and foster teamwork to achieve shared goals across functions. You earn the trust and support of others through collaboration and credibility. You ask insightful questions to analyze situations accurately and evaluate risks, benefits, and alternatives to make sound decisions

For This Role, You Will Need:

• Bachelor’s degree in Engineering, Computer Science, Information Security, or a related discipline, or equivalent relevant experience.
• Experience in product security, secure product development, cybersecurity governance, or related domains.
• Understanding of Secure Development Lifecycle (SDL), Secure-by-Design, and Defense-in-Depth principles.
• Knowledge of IEC 62443 and cybersecurity governance practices.
• Familiarity with European Cyber Resilience Act (CRA) requirements.
• Experience with cybersecurity standards and frameworks such as IEC 62443, ISO/IEC 27001, NIST SP 800-218, COBIT, or NIST Cybersecurity Framework.
• Knowledge of Software Bill of Materials (SBOM) concepts and implementation.
• Hands-on experience with static code analysis tools such as Coverity.
• Experience designing embedded systems using multitasking real-time operating systems (RTOS)
• Strong programming skills in C and C++.
• Familiarity with RTOS environments such as VxWorks, UCOS, ThreadX, FreeRTOS, or MQX.
• Knowledge of communication protocols such as RS232, SPI, and I2C.
• Experience with Linux environments, including U-Boot, Linux Kernel, GDB, and CMake.
• Understanding of embedded security best practices.
• Strong problem-solving, organizational, communication, and collaboration skills.

Preferred Qualifications That Set You Apart:

• Experience supporting cybersecurity regulatory compliance initiatives within industrial or embedded product environments.
• Knowledge of vulnerability management and product security incident response processes.
• Experience conducting threat modeling, penetration testing coordination, and security risk assessments.
• Exposure to industrial automation, embedded product development, or operational technology (OT) security.
• Ability to work effectively in global, cross-functional teams and manage multiple priorities.

Our Culture & Commitment to You:

At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an inclusive environment that encourages collaboration, innovation, and continuous learning. Through our comprehensive development programs, diverse career opportunities, and commitment to well-being, we support our people in achieving both personal and professional success. We believe that diverse perspectives drive stronger solutions and better outcomes for our customers, communities, and each other.