Senior Product Security Engineer

Emerson•Shakopee, MN

2d•$115,000 - $140,000•Onsite

About The Position

Emerson’s Measurement Solutions business is seeking a Senior Product Security Engineer to provide product security leadership for industrial sensing, connectivity, software, and cloud programs. In this role, you will own product security for a portfolio that spans wireless field devices, WirelessHART gateways, Ethernet-APL connectivity platforms, monitoring platforms, and Plantweb Insight software and cloud solutions. These products bring pressure, temperature, flow, level, and other critical measurements from the field into control systems and analytics platforms for customers in oil and gas, chemical, pharmaceutical, and other critical industries. You will embed security into every phase of the product lifecycle, from architecture and design through release and post-market support, and help product teams meet the requirements of the EU Cyber Resilience Act (CRA) and IEC 62443. This is a high-impact, hands-on technical role with broad visibility across engineering, product management, quality, legal, and our global security test organization.

Requirements

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field.
5+ years of experience in software, firmware, systems engineering, or cybersecurity, including experience supporting product or embedded/IoT security.
Knowledge of secure development lifecycle (SDL) practices, threat modeling, security risk assessments, vulnerability management, and secure design principles.
Familiarity with cybersecurity frameworks and standards, including CWE, CVE, CVSS, and OWASP.
Experience programming in languages such as C, C++, Java, or Python.
Working knowledge of Linux operating systems, networking fundamentals, and cybersecurity best practices.
Strong communication and collaboration skills with the ability to work effectively across global, cross-functional teams.
Legal authorization to work in the United States.
Authorized to work in the United States without sponsorship now and in the future. Individuals with temporary visas such as E, F-1 (including those with OPT or CPT), H-1, H-2, L-1, B, J or TN, or who need sponsorship for work authorization now or in the future, are not eligible for hire.

Nice To Haves

Experience securing industrial automation, industrial IoT, or operational technology (OT) products and protocols.
Knowledge of industry cybersecurity standards and regulations, including IEC 62443, NIST SSDF, and the EU Cyber Resilience Act.
Experience with cloud and container security technologies, such as Azure, AWS, Docker, or Kubernetes.
Experience with penetration testing, fuzzing, vulnerability assessment, and code analysis tools.
Familiarity with SBOM standards, software supply chain security, and software composition analysis.
Industry certifications such as CISSP, CSSLP, GICSP, OSCP, or ISA/IEC 62443 Cybersecurity Expert.
Experience mentoring engineers and providing technical leadership on cybersecurity initiatives.

Responsibilities

Serve as the Product Security Lead for assigned industrial automation products, connectivity platforms, software applications, and cloud solutions.
Drive secure development lifecycle (SDL) activities and ensure product security requirements are defined, implemented, and verified throughout the product development process.
Partner with hardware, firmware, software, and cloud engineering teams to design secure architectures and integrate cybersecurity best practices into products and solutions.
Lead cybersecurity risk assessments, threat modeling, and product security planning to identify and mitigate security risks.
Support security testing activities, including vulnerability assessments, penetration testing, code analysis, and remediation efforts.
Manage product security vulnerabilities and collaborate with cross-functional teams to investigate, prioritize, and resolve cybersecurity issues.
Support compliance with industry cybersecurity standards, regulations, certifications, and customer security requirements.
Provide technical guidance, training, and mentorship to engineering teams while promoting a strong culture of product cybersecurity.
Monitor emerging cybersecurity threats, technologies, and industry trends to continuously improve product security practices.