Senior Cyber security Engineer

Emerson Electric Co; Pune District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Emerson Electric Co is seeking a Product Security Verification and Validation Engineer to integrate threat modeling, risk assessment, and security testing into CI/CD pipelines. You will ensure embedded products resist real-world attacks while complying with industry standards.

The role requires 3–5 years in product security, familiarity with IEC 62443, ISO 27001, NIST, OWASP, and experience with ICS/embedded systems. Strong collaboration and presentation skills are essential.

Qualifications

• Bachelor’s degree or equivalent years of relative experience.
• 3–5 years of experience in product security standards and implementation.
• Knowledge of cybersecurity standards and frameworks (IEC 62443, ISO 27001, NIST, OWASP).
• Familiarity with risk assessment methodologies and CVSS scoring.
• Experience with ICS/embedded systems or network security preferred.
• Experience with secure by design principles and secure development lifecycle.

Responsibilities

• Create security test plans and artefacts for BU product certification efforts.
• Own security verification and validation across major/minor releases including SAST, threat mitigation, risk analysis, and software composition analysis.
• Coordinate with external penetration testing teams for abuse case, vulnerability scanning, pen tests, and PSIRT testing.
• Support development in validating fixes before sharing builds with the external test team.
• Collaborate on PSIRT handling and vulnerability management activities.
• Generate project metrics per EIC-Pune and BU guidelines.
• Report activities to Local Manager and contribute to assigned initiatives.
• Work in engineering lab for product and system level testing following safety guidelines.

Skills

Threat modeling

Risk assessment

CI/CD security

Presentation skills

Education

Bachelor’s degree

Master’s degree in electronics Eng.

Tools

Metasploit

Wireshark

Burp Suite

Job description

In This Role, Your Responsibilities Will Be:

• Work as per the direction from BU Product Security Officer / Lead.
• Create security test plan and associated test artefacts to support BU Product Certification efforts.
• Own Security Verification and Validation activity for all products and execute the tests below for every major and minor release:
  • Security requirement testing
  • Threat Mitigation testing
  • Static Code Analysis
  • Attack surface analysis
  • Software composition analysis
• Coordinate with independent penetration test team (GCC) for:
  • Abuse case / Fuzz testing
  • Known Vulnerability scanning
  • Penetration test
  • PSIRT specific test
• Support development team for validating fixes prior to sharing build with independent penetration test team.
• Collaborate with Product Security engineer for handling PSIRT and vulnerability management activities.
• Generate Project Metrics as per EIC-Pune and / or Business Unit Guidelines
• Report Local Manager for All the activities
• Contribute to EIC-Pune Assigned Initiatives
• Should be able to work in Engineering Laboratory for Product & System Level Testing following Safety Practices & Guidelines.

Who You Are:

• As a Product Security Verification and Validation Engineer, you are proficient in threat modeling, risk assessment, and integrating security validation into CI/CD pipelines while ensuring compliance with industry cybersecurity standards.You ensure embedded products are resilient against real-world attacks while meeting regulatory and industry cybersecurity standards.

For This Role, You Will Need:

• Bachelor's degree and/or equivalent years of relative experience.
• 3-5 years of experience and familiarity with product security standards and initiatives or practical work experience related to the verification and validation of products, services, and solutions.
• Knowledge of cybersecurity standards and frameworks (IEC 62443, ISO 27001, NIST, OWASP).
• Familiarity with risk assessment methodologies and CVSS scoring.
• Experience in industrial control systems (ICS), embedded systems, or network security is preferred.
• Experience in secure by design principles, best practices and the integration of security into preexisting development practices.
• Familiar with concepts such as secure development lifecycle, secure by design, and defense in depth.
• Familiar with Microsoft Office tools for effective communications and information management.
• Ability to organize, prepare and make compelling presentations.
• Self-motivated and able to work under tight timeline.
• Strong problem solving / interaction management skills.
• Strong organizational and collaboration skills.

• Respect Company's Values and Ethics.

Preferred Qualifications That Set You Apart:

• Master's degree or equivalent experience in electronics engineering or related field.
• Familiarity with penetration testing tools (e.g., Metasploit, Wireshark, Burp Suite).
• Familiarity with hardware design and debugging.
• Understanding of network protocols (TCP/IP, HTTPS, SSH, SNMP, OPC-UA, MQTT).
• Understanding of firewalls, IDS/IPS, endpoint security, and access control systems.
• Experience with secure coding practices and code review processes.
• Prior experience in the industrial/ factory automation or control systems industry.

Our Culture & Commitment to You:

• At Emerson, we are committed to fostering a culture where every employee is valued and respected for their unique experiences and perspectives. We believe a diverse and inclusive work environment contributes to the rich exchange of ideas and diversity of thoughts, that inspires innovation and brings the best solutions to our customers.
• This philosophy is fundamental to living our company's values and our responsibility to leave the world in a better place.Learn more about our Culture & Values and about Diversity, Equity & Inclusion at Emerson.
• If you have a disability and are having difficulty accessing or using this website to apply for a position, please contact: [e-mail].