Job description

In This Role, Your Responsibilities Will Be:

Work as per the direction from BU Product Security Officer / Lead.
Create security test plan and associated test artefacts to support BU Product Certification efforts.
Own Security Verification and Validation activity for all products and execute the tests below for every major and minor release:
- Security requirement testing
- Threat Mitigation testing
- Static Code Analysis
- Attack surface analysis
- Software composition analysis
Coordinate with independent penetration test team (GCC) for:
- Abuse case / Fuzz testing
- Known Vulnerability scanning
- Penetration test
- PSIRT specific test
Support development team for validating fixes prior to sharing build with independent penetration test team.
Collaborate with Product Security engineer for handling PSIRT and vulnerability management activities.
Generate Project Metrics as per EIC-Pune and / or Business Unit Guidelines
Report Local Manager for All the activities
Contribute to EIC-Pune Assigned Initiatives
Should be able to work in Engineering Laboratory for Product & System Level Testing following Safety Practices & Guidelines.

Who You Are:

As a Product Security Verification and Validation Engineer, you are proficient in threat modeling, risk assessment, and integrating security validation into CI/CD pipelines while ensuring compliance with industry cybersecurity standards. You ensure embedded products are resilient against real-world attacks while meeting regulatory and industry cybersecurity standards.

For This Role, You Will Need:

Bachelor's degree and/or equivalent years of relative experience.
3-5 years of experience and familiarity with product security standards and initiatives or practical work experience related to the verification and validation of products, services, and solutions.
Knowledge of cybersecurity standards and frameworks (IEC 62443, ISO 27001, NIST, OWASP).
Familiarity with risk assessment methodologies and CVSS scoring.
Experience in industrial control systems (ICS), embedded systems, or network security is preferred.
Experience in secure by design principles, best practices and the integration of security into preexisting development practices.
Familiar with concepts such as secure development lifecycle, secure by design, and defense in depth.
Familiar with Microsoft Office tools for effective communications and information management.
Ability to organize, prepare and make compelling presentations.
Self-motivated and able to work under tight timeline.
Strong problem solving / interaction management skills.
Strong organizational and collaboration skills.
Respect Company’s Values and Ethics.

Preferred Qualifications That Set You Apart:

Master’s degree or equivalent experience in electronics engineering or related field.
Familiarity with penetration testing tools (e.g., Metasploit, Wireshark, Burp Suite).
Familiarity with hardware design and debugging.
Understanding of network protocols (TCP/IP, HTTPS, SSH, SNMP, OPC-UA, MQTT).
Understanding of firewalls, IDS/IPS, endpoint security, and access control systems.
Experience with secure coding practices and code review processes.
Prior experience in the industrial/ factory automation or control systems industry.

Our Culture & Commitment to You:

At Emerson, we are committed to fostering a culture where every employee is valued and respected for their unique experiences and perspectives. We believe a diverse and inclusive work environment contributes to the rich exchange of ideas and diversity of thoughts, that inspires innovation and brings the best solutions to our customers.
This philosophy is fundamental to living our company’s values and our responsibility to leave the world in a better place. Learn more about our Culture & Values and about Diversity, Equity & Inclusion at Emerson.
If you have a disability and are having difficulty accessing or using this website to apply for a position, please contact: [email protected].

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.