Senior Industrial Product Security Lead – SDL & Cloud

Emerson; Shakopee (MN); On-site; USD 115,000 - 140,000; Full time

Job summary

Emerson's Measurement Solutions is seeking a Senior Product Security Engineer to own product security across embedded, software, and cloud platforms. You will drive secure development lifecycle practices for wireless devices, gateways, monitoring platforms, and Plantweb Insight solutions in oil, gas, chemical, and other critical industries.

You will collaborate with hardware, software, and cloud teams, lead risk assessments and threat modeling, and mentor engineers while ensuring compliance with

Qualifications

• Bachelor’s degree in CS/CE/EE/Cybersecurity or related field.
• 5+ years in software, firmware, systems engineering, or cybersecurity, including embedded/IoT security.
• Knowledge of SDL practices, threat modeling, risk assessments, vulnerability management, and secure design.
• Familiarity with CWE, CVE, CVSS, and OWASP frameworks.
• Experience programming in C, C++, Java, or Python.
• Working knowledge of Linux, networking fundamentals, and cybersecurity best practices.
• Strong communication and collaboration across global teams.
• Legal authorization to work in the United States without sponsorship now or in the future.

Responsibilities

• Serve as the Product Security Lead for assigned industrial automation products, connectivity platforms, software applications, and cloud solutions.
• Drive secure development lifecycle (SDL) activities and ensure product security requirements are defined, implemented, and verified throughout the product development process.
• Partner with hardware, firmware, software, and cloud engineering teams to design secure architectures and integrate cybersecurity best practices into products and solutions.
• Lead cybersecurity risk assessments, threat modeling, and product security planning to identify and mitigate security risks.
• Support security testing activities, including vulnerability assessments, penetration testing, code analysis, and remediation efforts.
• Manage product security vulnerabilities and collaborate with cross-functional teams to investigate, prioritize, and resolve cybersecurity issues.
• Support compliance with industry cybersecurity standards, regulations, certifications, and customer security requirements.
• Provide technical guidance, training, and mentorship to engineering teams while promoting a strong culture of product cybersecurity.
• Monitor emerging cybersecurity threats, technologies, and industry trends to continuously improve product security practices.

Skills

C/C++

Java

Python

Linux

Networking fundamentals

Threat modeling

Secure SDLC (SDL)

OWASP

CWE/CVE/CVSS

Security design principles

Communication

Education

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or related field

Tools

Azure

AWS

Docker

Kubernetes

Job description

Emerson's Measurement Solutions is seeking a Senior Product Security Engineer to own product security across embedded, software, and cloud platforms. You will drive secure development lifecycle practices for wireless devices, gateways, monitoring platforms, and Plantweb Insight solutions in oil, gas, chemical, and other critical industries.

You will collaborate with hardware, software, and cloud teams, lead risk assessments and threat modeling, and mentor engineers while ensuring compliance with