Product Security Engineer securing embedded products, firmware, and industrial components at Rockwell Automation. Focused on firmware security, secure architecture, and secure development lifecycle practices.
Responsibilities
The Product Security Engineer secures embedded products, firmware, and industrial components across the full product lifecycle.
Your role combines firmware security, secure architecture, reverse engineering, and secure development lifecycle practices.
You will report to the Product Security Leader/Officer (PSL) and partner with engineering teams through the engineering Vee to mature security controls in high-visibility industrial products.
You will assess vulnerabilities, analyze SBOM and CVE data, model threats, score risk, and support secure-by-design decisions.
You will help create and refine security controls such as secure boot, trusted hardware, cryptographic protections, and secure update mechanisms.
You will assist teams during design reviews, testing, debugging, and remediation activities.
You will evaluate diagnostics, logs, test results, and firmware images to identify weaknesses or anomalies.
You will have lifecycle responsibility for threat model components which will be used by Security Champions for Models.
You will lead evaluations of Threat model Dispositions.
You will help ensure products meet secure software development framework (SSDF) DevSecOps processes.
Requirements
Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, or a related field
Legal authorization to work in the U.S.
Typically requires 8+ years of experience in embedded systems, firmware development, cybersecurity, or product security
Proficiency in C/C++, embedded operating systems, microcontrollers, Linux, Infrastructure as Code and device drivers
Experience using debugging, tracing, or reverse engineering tools
Experience performing vulnerability analysis or threat modeling
Experience with industrial or real-time embedded systems
Experience with IEC 62443, NIST 800-53, NIST 800-82, or Common Criteria
Security certifications such as CISSP, CSSLP, OSCP, GPEN, GREM, or IEC 62443
Travel, including internationally, up to 25% of time.
Benefits
Health, Medical, Dental, Vision, Life & Disability Insurance
Working Student in Information Security at Allianz Direct supporting security monitoring and managing vulnerability assessments. Collaborating with cross - functional teams to enhance cybersecurity posture and awareness.
Enterprise Security Implementation Specialist at Vodafone supporting customers in implementing security solutions. Responsibilities include onboarding, incident management, and ensuring service quality with Fortinet and Zscaler products.
Cyber Security Specialist at Vodafone responsible for shaping and deploying security measures. Collaborating with business, IT, and Network teams as a trusted security partner.
Manager at PwC contributing to digital transformation in Utilities through technology consulting and stakeholder management. Focused on creating strategies and providing technology solutions in a data - driven world.
Research Associate conducting advanced research in iOS security within a leading institute for applied cybersecurity. Emphasis on secure application development and vulnerability analysis.
Cybersecurity Engineer focused on threat monitoring and incident response for Verizon's network security. Collaborating on security architecture and vulnerability management across multiple locations.
Senior Manager of Application Security leading initiatives to protect applications at Nordstrom through strategic leadership and AI - driven tooling. Collaborating with engineering to ensure secure software development practices.
Information Security Engineer responsible for deploying and supporting security tools across cloud and on - premise systems. Collaborating with IT to mitigate security risks in a hybrid work environment.
Casual Retail Security Officer for MSS Security ensuring safety at Tweed Mall in Tweed Heads. Responsible for patrols, incident response, and customer service.
Financial security advisor at Desjardins developing client relationships and selling life and health insurance products. Focusing on customer satisfaction and personalized financial solutions.