Cve/cwe/cvss Engineer Jobs

1 job found

Today

Senior Product Security Engineer

Emerson Shakopee, MN

Shakopee, MN

Today

$115k - $140k/yr Full time Senior Application Security Cve/cwe/cvss

Apply Now

Job Description

Emerson is hiring a Senior Product Security Engineer in Shakopee, MN to lead product security for industrial sensing, connectivity, software, and cloud programs. The role focuses on embedding security across the product lifecycle to help meet EU Cyber Resilience Act and IEC 62443 expectations.

Key Responsibilities

Act as Product Security Lead for assigned industrial automation products, connectivity platforms, software applications, and cloud solutions.
Drive secure development lifecycle (SDL) activities and ensure product security requirements are defined, implemented, and verified across development.
Collaborate with hardware, firmware, software, and cloud teams to shape secure architectures and incorporate cybersecurity best practices.
Lead cybersecurity risk assessments, threat modeling, and product security planning to identify and mitigate security risks.
Support security testing, including vulnerability assessments, penetration testing, code analysis, and remediation work.
Manage product security vulnerabilities, partnering cross-functionally to investigate, prioritize, and resolve cybersecurity issues.
Support compliance with industry cybersecurity standards, regulations, certifications, and customer security requirements.
Provide technical guidance, training, and mentorship to engineering teams while strengthening a product cybersecurity culture.
Monitor emerging cybersecurity threats, technologies, and industry trends to continuously improve product security practices.

Required Qualifications

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field.
5+ years of experience in software, firmware, systems engineering, or cybersecurity, including support for product or embedded/IoT security.
Knowledge of SDL practices, threat modeling, security risk assessments, vulnerability management, and secure design principles.
Familiarity with cybersecurity frameworks and standards, including CWE, CVE, CVSS, and OWASP.
Experience programming in C, C++, Java, or Python.
Working knowledge of Linux, networking fundamentals, and cybersecurity best practices.
Strong communication and collaboration skills, including the ability to work across global, cross-functional teams.
Legal authorization to work in the United States.
Authorized to work in the United States without sponsorship now and in the future. Individuals with temporary visas such as E, F-1 (including OPT or CPT), H-1, H-2, L-1, B, J, or TN, or who need sponsorship for work authorization now or in the future, are not eligible for hire.

Technologies

C, C++
Java, Python
Linux
CWE, CVE, CVSS, OWASP
IEC 62443, EU Cyber Resilience Act
SDL (secure development lifecycle)

Preferred Qualifications

Experience securing industrial automation, industrial IoT, or operational technology (OT) products and protocols.
Knowledge of industry cybersecurity standards and regulations, including IEC 62443, NIST SSDF, and the EU Cyber Resilience Act.
Experience with cloud and container security technologies, such as Azure, AWS, Docker, or Kubernetes.
Experience with penetration testing, fuzzing, vulnerability assessment, and code analysis tools.
Familiarity with SBOM standards, software supply chain security, and software composition analysis.
Industry certifications such as CISSP, CSSLP, GICSP, OSCP, or ISA/IEC 62443 Cybersecurity Expert.
Experience mentoring engineers and providing technical leadership on cybersecurity initiatives.

Compensation and Location

Location: Shakopee, MN (onsite)
Salary: USD 115,000 - 140,000 per year

Benefits

Medical insurance plans (variety of medical insurance plans)
Dental and vision coverage
Employee Assistance Program
Profit sharing retirement
Tuition reimbursement
Employee resource groups
Recognition
Flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave
Competitive base salary
Reward performance during annual merit review process

Work Authorization

Emerson will only employ individuals who are legally authorized to work in the United States. This position does not provide sponsorship.

View full job page →

Get Cve/cwe/cvss Engineer Jobs alerts

New Cve/cwe/cvss Engineer Jobs, daily.