Senior / Firmware Security Engineer

ROCKWELL AUTOMATION ASIA PACIFIC BUSINESS CENTER PTE. LTD.; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive mindfulness programs

Volunteer Paid Time off

Volunteer donation matching

Employee Assistance Program

OnTrack wellbeing program

On-demand digital course library

Job summary

Rockwell Automation Asia Pacific Business Center Pte. Ltd. is seeking a Senior/Firmware Security Engineer to lead product-level cybersecurity design, implementation, testing, and remediation for embedded industrial automation products.

You will mentor engineers and drive secure development practices across global teams. The role requires 2+ years in embedded firmware and firmware security, with strong C/C++ programming, cryptography knowledge, and experience in threat modeling, secure boot, and

Qualifications

• Bachelor/Master in relevant engineering field.
• Minimum 2+ years of embedded firmware development experience.
• Minimum 2+ years focused on firmware security or embedded product security.
• Candidates with 4+ years may be offered Senior Engineer.
• Experience leading cybersecurity initiatives and influencing architecture.

Responsibilities

• Design, develop, debug, test, and maintain embedded firmware security features using C/C++.
• Drive Secure Boot, secure firmware updates, authentication, encryption, and key management.
• Develop threat modeling, security reviews, risk assessments, and remediation activities.
• Perform static code analysis and fixes.
• Maintain traceability between requirements, implementation and verification.
• Mentor engineers and contribute to secure development processes and standards.
• Collaborate with firmware, hardware, systems, quality, and product security teams globally.
• Investigate and resolve complex cybersecurity and firmware issues.
• Act as a security subject matter expert.
• Investigations of critical vulnerabilities and field-reported issues across teams.
• Develop and improve enterprise-wide engineering processes and security verification methodologies.
• Evaluate emerging cybersecurity technologies and standards to influence product security strategies.
• Ensure adherence to quality systems and regulatory obligations.

Skills

Embedded firmware

C/C++ programming

Firmware security

Threat modeling

Security testing

Python scripting

DevOps security

Leadership

Cryptography

Secure Boot

PKI

Vulnerability management

TCP/IP networking

Education

Bachelor of Science in Computer Science/Engineering

Master's degree preferred

Tools

GCC/Compiler toolchain

Static analysis tools

Penetration testing tools

Cryptography libraries

TLS/SSH tooling

Job description

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility -our people are energized problem solvers that take pride in how thework we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description

The Senior / Firmware Security Engineer responsible for product-level cybersecurity design, implementation, testing, and remediation activities for embedded industrial automation products. This role provides technical leadership within project teams and drives the adoption of secure development practices while mentoring engineers and collaborating with global stakeholders.

Your Responsibilities:

• Design, development, debug, test, and maintenance of embedded firmware security features using C/C++.
• Drive implementation of Secure Boot, secure firmware updates, authentication, encryption, key management, certificate management and secure communications.
• Develop threat modeling, conduct security reviews, risk assessments, and vulnerability remediation activities.
• Perform static code analysis & fixing
• Maintain traceability between requirements, implementation, and verification activities.
• Mentor engineers and contribute to secure development processes and standards.
• Collaborate with firmware, hardware, systems, quality, and product security teams globally.
• Investigate and resolve complex cybersecurity and firmware issues.
• Act as a security subject matter expert
• Investigations of critical security vulnerabilities and field-reported cybersecurity issues, driving resolution across multiple teams.
• Develop and improve enterprise-wide engineering processes, security verification methodologies, development standards, and best practices.
• Evaluate emerging cybersecurity technologies, industry trends, standards, and threats to influence future product security strategies.
• Ensure adherence to quality systems, secure development processes, information protection policies, intellectual property requirements, and regulatory compliance obligations.

The Essentials - You Will Have:

• Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.
• Master's degree preferred.
• Minimum 2+ years of embedded firmware development experience.
• Minimum 2+ years of experience focused on firmware security, cybersecurity engineering, or embedded product security.
• Candidates with more than 4 years' experience in the embedded security development area might be offered Senior Engineer position.
• Candidates with more than 4 years' experience in the embedded security development area might be offered Senior Engineer position.
• Demonstrated technical leadership across multiple products, projects, or technology platforms.
• Proven experience leading cybersecurity initiatives and influencing architectural decisions.
• Proficiency in embedded systems and real-time firmware development using C/C++.
• Embedded security architecture and secure product development.
• Good understanding of:Secure BootCryptography and PKISecure Firmware UpdatesSecure StorageKey Management SystemsSecurity ProtocolsTCP/IP NetworkingDevice Authentication Frameworks
• Experience with threat modeling methodologies and security risk assessments.
• Experience with penetration testing, security assessment tools, and vulnerability management processes.
• Proficiency in Python or similar scripting languages.
• Experience with DevOps and security automation practices.

The Preferred - You Might Also Have:

• Expertise in IEC 62443 and industrial cybersecurity frameworks.
• Security certifications such as CISSP, GICSP, CSSLP, GIAC, or equivalent.
• Experience with industrial control systems and industrial automation products.
• Experience influencing organizational cybersecurity strategy and governance.

What We Offer:

Our benefits package includes …

• Comprehensive mindfulness programs with a premium membership to Calm
• Volunteer Paid Time off available after 6 months of employment for eligible employees
• Company volunteer and donation matching program – Your volunteer hours or personal cash donations to an eligible charity can be matched with a charitable donation.
• Employee Assistance Program
• Personalized wellbeing programs through our OnTrack program
• On-demand digital course library for professional development

... and other local benefits!

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

#LI-Hybrid

#LI-KV1

Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.