Senior Embedded Firmware Security Architect

National Society for Black Engineers; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive mindfulness programs

Volunteer paid time off

Volunteer and donation matching

Employee Assistance Program

Personal wellbeing programs

On-demand digital course library

Job summary

Rockwell Automation seeks a Senior / Firmware Security Engineer to lead product-level cybersecurity design for embedded automation products. You will drive secure development practices, mentor engineers, and collaborate with global teams to improve security strategies.

The role emphasizes Secure Boot, firmware updates, cryptography, key management, and secure communications, with opportunities to influence architectural decisions and technology direction.

Qualifications

• Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.
• Master's degree preferred.
• Minimum 2+ years of embedded firmware development experience.
• Minimum 2+ years focused on firmware security, cybersecurity engineering, or embedded product security.
• Candidates with more than 4 years' experience in the embedded security development area might be offered Senior Engineer position.
• Demonstrated technical leadership across multiple products, projects, or technology platforms.
• Proven experience leading cybersecurity initiatives and influencing architectural decisions.
• Proficiency in embedded systems and real-time firmware development using C/C++.
• Embedded security architecture and secure product development.
• Good understanding of: Secure Boot, Cryptography/PKI, Secure Firmware Updates, Secure Storage, Key Management Systems, Security Protocols, TCP/IP Networking, Device Authentication Frameworks.
• Experience with threat modeling methodologies and security risk assessments.
• Experience with penetration testing, security assessment tools, and vulnerability management processes.
• Proficiency in Python or similar scripting languages.
• Experience with DevOps and security automation practices.

Responsibilities

• Design, development, debug, test, and maintenance of embedded firmware security features using C/C++.
• Drive implementation of Secure Boot, secure firmware updates, authentication, encryption, key management, certificate management and secure communications.
• Develop threat modeling, conduct security reviews, risk assessments, and vulnerability remediation activities.
• Perform static code analysis & fixing
• Maintain traceability between requirements, implementation, and verification activities.
• Mentor engineers and contribute to secure development processes and standards.
• Collaborate with firmware, hardware, systems, quality, and product security teams globally.
• Investigate and resolve complex cybersecurity and firmware issues.
• Act as a security subject matter expert
• Investigations of critical security vulnerabilities and field-reported cybersecurity issues, driving resolution across multiple teams.
• Develop and improve enterprise-wide engineering processes, security verification methodologies, development standards, and best practices.
• Evaluate emerging cybersecurity technologies, industry trends, standards, and threats to influence future product security strategies.
• Ensure adherence to quality systems, secure development processes, information protection policies, intellectual property requirements, and regulatory compliance obligations.

Skills

Embedded firmware

Firmware security

C/C++

Python

Threat modeling

Security reviews

Penetration testing

DevOps security

IEC 62443

Leadership

Education

BSc in CS/CE/EE

MSc preferred

Job description

Rockwell Automation seeks a Senior / Firmware Security Engineer to lead product-level cybersecurity design for embedded automation products. You will drive secure development practices, mentor engineers, and collaborate with global teams to improve security strategies.

The role emphasizes Secure Boot, firmware updates, cryptography, key management, and secure communications, with opportunities to influence architectural decisions and technology direction.