Senior DevOps Security Engineer

Emerson•Shakopee, MN

14d•$108,000 - $120,000

About The Position

If you are an experienced DevSecOps Engineering professional looking for an opportunity to grow, Emerson has an opening for you! Based in our Shakopee, MN location, you will lead the integration of security into our software development lifecycle within the Cross Portfolio, Technology and Innovation (CPTI) organization for embedded device firmware. This role requires technical expertise in DevOps practices, secure software development, and cybersecurity governance. In This Role, Your Responsibilities Will Be: Collaborating with the Firmware Design team and Product Security team to implement/enhance cybersecurity across the CPTI product portfolio Assist in the development and implementation of secure coding practices as part of an embedded software group. Support efforts to meet regulatory compliance requirements (e.g. 62443, CRA, etc.) Lead the design and implementation of secure CI/CD pipelines and DevSecOps frameworks. Implement Secure Development Lifecycle (SDL) standards and best practices for embedded device firmware. Conduct advanced risk assessments, threat modeling, and vulnerability analysis for our products. Drive compliance initiatives and support audits for regulatory and internal security requirements. Oversee incident response planning and vendor risk management strategies. Who You Are: You stay on top of new technologies. You research initiatives and try new approaches. You stay aligned with your goals and stay productive. You prepare content for communication that is impactful. You take time to ask questions, define the problem and make learning a priority. You dig for root causes of a problem and look for patterns. For This Role, You Will Need: Bachelors Degree in Software Engineering, Computer Science, Cybersecurity, or related field Five (5) or more years of experience in DevOps, Security Engineering, or GRC roles Expert-level knowledge of Azure DevOps Legal authorization to work in the United States - Sponsorship will not be provided for this role Preferred Qualifications that Set You Apart: Expert-level knowledge of DevOps tools (GitHub Actions, GitLab CI/CD) and security tools (SAST, DAST, container security) Proven experience with cybersecurity frameworks and compliance standards (IEC, ISO, NIST, GDPR) Exceptional problem-solving, strategic thinking, and communication skills Certifications such as CISSP, CISM, or cloud security specialties Strong understanding of containerization (Docker, Kubernetes) Advanced knowledge of Infrastructure as Code (Terraform, Ansible) Experience in secure software distribution, software signing, and advanced threat modeling Our Culture & Commitment to You: At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results. We recognize the importance of employee wellbeing and know that to do your best you must have flexible, competitive benefits plans to meet you and your family’s physical, mental, financial, and social needs. We provide, a variety of medical insurance plans, with dental and vision coverage, Employee Assistance Program, profit sharing retirement, tuition reimbursement, employee resource groups, recognition, and much more. Our culture prioritizes work-life balance and offers flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave. Our compensation philosophy is simple: we pay a competitive base salary, within the local market in which we operate, and reward performance during our annual merit review process. The salary range for this role is $108,000-$120,000 annually, commensurate with the skills, talent, capabilities, and experience each candidate brings to a role. #LI-AK1

Requirements

Bachelors Degree in Software Engineering, Computer Science, Cybersecurity, or related field
Five (5) or more years of experience in DevOps, Security Engineering, or GRC roles
Expert-level knowledge of Azure DevOps
Legal authorization to work in the United States - Sponsorship will not be provided for this role

Nice To Haves

Expert-level knowledge of DevOps tools (GitHub Actions, GitLab CI/CD) and security tools (SAST, DAST, container security)
Proven experience with cybersecurity frameworks and compliance standards (IEC, ISO, NIST, GDPR)
Exceptional problem-solving, strategic thinking, and communication skills
Certifications such as CISSP, CISM, or cloud security specialties
Strong understanding of containerization (Docker, Kubernetes)
Advanced knowledge of Infrastructure as Code (Terraform, Ansible)
Experience in secure software distribution, software signing, and advanced threat modeling

Responsibilities

Collaborating with the Firmware Design team and Product Security team to implement/enhance cybersecurity across the CPTI product portfolio
Assist in the development and implementation of secure coding practices as part of an embedded software group.
Support efforts to meet regulatory compliance requirements (e.g. 62443, CRA, etc.)
Lead the design and implementation of secure CI/CD pipelines and DevSecOps frameworks.
Implement Secure Development Lifecycle (SDL) standards and best practices for embedded device firmware.
Conduct advanced risk assessments, threat modeling, and vulnerability analysis for our products.
Drive compliance initiatives and support audits for regulatory and internal security requirements.
Oversee incident response planning and vendor risk management strategies.