Senior Cyber security Engineer

City of Shakopee, MN; Pune District; On-site; INR 1,400,000 - 2,400,000; Full time

Job summary

Emerson is seeking a Product Security Verification and Validation Engineer to integrate security validation into CI/CD pipelines and ensure embedded products are resilient against real-world attacks while meeting cybersecurity standards.

You will work to align with IEC 62443, ISO 27001, NIST, and OWASP, participating in PSIRT and vulnerability management within an industrial setting.

Qualifications

• Bachelor's degree and/or equivalent years of relative experience.
• 3-5 years of experience with product security standards and validation.
• Knowledge of cybersecurity standards (IEC 62443, ISO 27001, NIST, OWASP).

Responsibilities

• Work under the direction from BU Product Security Officer / Lead.
• Create security test plans and artefacts to support BU Product Certification efforts.
• Own Security Verification and Validation for all products and execute tests for major and minor releases: security requirement testing, threat mitigation testing, static code analysis, attack surface analysis, software composition analysis.
• Coordinate with independent penetration test team (GCC) for abuse case / fuzz testing, vulnerability scanning, penetration tests, PSIRT testing.
• Support development team for validating fixes prior to sharing builds with independent penetration test team.
• Collaborate with Product Security engineer on PSIRT and vulnerability management activities.
• Generate Project Metrics per EIC-Pune or BU Guidelines.
• Report to Local Manager for all activities.
• Contribute to EIC-Pune Assigned Initiatives.
• Work in Engineering Laboratory for Product & System Testing following Safety Practices & Guidelines.

Skills

Threat modeling

Risk assessment

CI/CD security

Regulatory standards

Embedded security

Vulnerability management

Education

Bachelor's degree

Tools

Metasploit

Wireshark

Burp Suite

Job description

In This Role, Your Responsibilities Will Be:

• Work as per the direction from BU Product Security Officer / Lead.
• Create security test plan and associated test artefacts to support BU Product Certification efforts.
• Own Security Verification and Validation activity for all products and execute the tests below for every major and minor release:
  • Security requirement testing
  • Threat Mitigation testing
  • Static Code Analysis
  • Attack surface analysis
  • Software composition analysis
• Coordinate with independent penetration test team (GCC) for:
  • Abuse case / Fuzz testing
  • Known Vulnerability scanning
  • Penetration test
  • PSIRT specific test
• Support development team for validating fixes prior to sharing build with independent penetration test team.
• Collaborate with Product Security engineer for handling PSIRT and vulnerability management activities.
• Generate Project Metrics as per EIC-Pune and / or Business Unit Guidelines
• Report Local Manager for All the activities
• Contribute to EIC-Pune Assigned Initiatives
• Should be able to work in Engineering Laboratory for Product & System Level Testing following Safety Practices & Guidelines.

Who You Are:

• As a Product Security Verification and Validation Engineer, you are proficient in threat modeling, risk assessment, and integrating security validation into CI/CD pipelines while ensuring compliance with industry cybersecurity standards. You ensure embedded products are resilient against real-world attacks while meeting regulatory and industry cybersecurity standards.

For This Role, You Will Need:

• Bachelor's degree and/or equivalent years of relative experience.
• 3-5 years of experience and familiarity with product security standards and initiatives or practical work experience related to the verification and validation of products, services, and solutions.
• Knowledge of cybersecurity standards and frameworks (IEC 62443, ISO 27001, NIST, OWASP).
• Familiarity with risk assessment methodologies and CVSS scoring.
• Experience in industrial control systems (ICS), embedded systems, or network security is preferred.
• Experience in secure by design principles, best practices and the integration of security into preexisting development practices.
• Familiar with concepts such as secure development lifecycle, secure by design, and defense in depth.
• Familiar with Microsoft Office tools for effective communications and information management.
• Ability to organize, prepare and make compelling presentations.
• Self-motivated and able to work under tight timeline.
• Strong problem solving / interaction management skills.
• Strong organizational and collaboration skills.

• Respect Company’s Values and Ethics.

Preferred Qualifications That Set You Apart:

• Master’s degree or equivalent experience in electronics engineering or related field.
• Familiarity with penetration testing tools (e.g., Metasploit, Wireshark, Burp Suite).
• Familiarity with hardware design and debugging.
• Understanding of network protocols (TCP/IP, HTTPS, SSH, SNMP, OPC-UA, MQTT).
• Understanding of firewalls, IDS/IPS, endpoint security, and access control systems.
• Experience with secure coding practices and code review processes.
• Prior experience in the industrial/ factory automation or control systems industry.

Our Culture & Commitment to You:

• At Emerson, we are committed to fostering a culture where every employee is valued and respected for their unique experiences and perspectives. We believe a diverse and inclusive work environment contributes to the rich exchange of ideas and diversity of thoughts, that inspires innovation and brings the best solutions to our customers.
• This philosophy is fundamental to living our company’s values and our responsibility to leave the world in a better place. Learn more about our Culture & Values and about Diversity, Equity & Inclusion at Emerson.
• If you have a disability and are having difficulty accessing or using this website to apply for a position, please contact [e-mail].