About the role

  • Product Security Engineer securing embedded products, firmware, and industrial components at Rockwell Automation. Focused on firmware security, secure architecture, and secure development lifecycle practices.

Responsibilities

  • The Product Security Engineer secures embedded products, firmware, and industrial components across the full product lifecycle.
  • Your role combines firmware security, secure architecture, reverse engineering, and secure development lifecycle practices.
  • You will report to the Product Security Leader/Officer (PSL) and partner with engineering teams through the engineering Vee to mature security controls in high-visibility industrial products.
  • You will assess vulnerabilities, analyze SBOM and CVE data, model threats, score risk, and support secure-by-design decisions.
  • You will help create and refine security controls such as secure boot, trusted hardware, cryptographic protections, and secure update mechanisms.
  • You will assist teams during design reviews, testing, debugging, and remediation activities.
  • You will evaluate diagnostics, logs, test results, and firmware images to identify weaknesses or anomalies.
  • You will have lifecycle responsibility for threat model components which will be used by Security Champions for Models.
  • You will lead evaluations of Threat model Dispositions.
  • You will help ensure products meet secure software development framework (SSDF) DevSecOps processes.

Requirements

  • Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, or a related field
  • Legal authorization to work in the U.S.
  • Typically requires 8+ years of experience in embedded systems, firmware development, cybersecurity, or product security
  • Proficiency in C/C++, embedded operating systems, microcontrollers, Linux, Infrastructure as Code and device drivers
  • Experience using debugging, tracing, or reverse engineering tools
  • Experience performing vulnerability analysis or threat modeling
  • Experience with industrial or real-time embedded systems
  • Experience with IEC 62443, NIST 800-53, NIST 800-82, or Common Criteria
  • Security certifications such as CISSP, CSSLP, OSCP, GPEN, GREM, or IEC 62443
  • Travel, including internationally, up to 25% of time.

Benefits

  • Health, Medical, Dental, Vision, Life & Disability Insurance
  • 401k
  • Paid Time off
  • Parental and Caregiver Leave
  • Flexible Work Schedule

Job title

Senior Product Security Engineer

Job type

Experience level

Senior

Salary

$168,960 - $253,440 per year

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job