Manager, Development Engineering - Cybersecurity
Job Description
The Manager, Development Engineering (Cybersecurity) will direct cybersecurity process development, third-party integration efforts, and product security improvements to safeguard Industrial Automation and Control System offerings. This onsite role is based in the Pittsburgh, PA 15146 area (Cranberry Township, PA) and requires close partnership across IT, OT, Engineering, Product Development, and the Business Unit.
Key Responsibilities
- Lead product cybersecurity strategy, governance, compliance, and secure development practices across the product portfolio.
- Oversee vulnerability management, penetration testing, incident response coordination, and cybersecurity risk mitigation initiatives.
- Manage third-party cybersecurity solutions, vendor relationships, and associated integration activities.
- Drive compliance and certification efforts, including IEC 62443 and evolving cybersecurity regulations.
- Provide leadership for industrial communications architectures and system integration across operational and enterprise environments.
- Partner with internal and external stakeholders to advance product security objectives and technology roadmaps.
- Lead, mentor, and develop a team of cybersecurity and communications professionals while promoting a strong security culture.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Engineering, Computer Science, Information Technology, Engineering, or a related discipline (an equivalent combination of education and experience will be considered).
- At least 5 years of progressive cybersecurity experience leading cybersecurity operations, risk management, compliance, and incident response programs.
- Strong leadership or people management background, along with technical foundations in industrial networking, communications, automations, or a related field.
- Knowledge of IEC 62443, Vulnerability Management, and NERC-CIP.
- Experience with process and product certifications, including SAFETY Act and IEC 62443 4-1, 4-2, and 3-3.
- Legal authorization to work in the United States without sponsorship now or in the future.
Relevant Technologies and Frameworks
- IEC 62443, OPC UA, MQTT, Modbus, DNP3, IEC 61850, PROFINET, BACnet
- SAFETY Act, NERC-CIP, ISO 27001
- NIST Secure Software Development Framework, NIST Cybersecurity Framework
- OWASP Software Assurance Maturity Model, OWASP Secure by Design Framework
- Zero trust, Secure by Design, Cloud Security (Azure and/or AWS)
- Identity & Access Management, Security Operations and Threat Detection, Software Bill of Materials
- CISSP, Security+, GICSP
Benefits
- Medical insurance plans
- Dental and vision coverage
- Employee Assistance Program
- 401(k)
- Tuition reimbursement
- Employee resource groups
- Recognition
- Flexible time off plans
- Paid parental leave (maternal and paternal)
- Vacation and holiday leave
Additional Candidate Attributes
- Quickly and decisively take action in fact-changing, unpredictable situations.
- Distinguish relevant details from nonessential information to understand complex scenarios.
- Communicate effectively in one-on-one, small and large group settings, and across diverse styles and position levels.
- Develop others through coaching, feedback, exposure, and stretch assignments.
Preferred Qualifications
- 10 or more years of progressive cybersecurity experience.
- Experience securing Industrial Control Systems (ICS), Operational Technology (OT), Manufacturing, or Industrial Automation environments.
- Experience supporting global organizations and distributed teams.
- Knowledge of the Ovation Product Portfolio, and/or critical infrastructure and industrial cybersecurity regulations affecting power, water, and controls/automation industries.
- Professional certifications including CISSP, Security+, and GICSP.
- Strong understanding of security standards and regulations: ISO 27001, NIST Secure Software Development Framework, NIST Cybersecurity Framework, OWASP Software Assurance Maturity Model, and OWASP Secure by Design Framework.
- Strong understanding of modern security topics: Zero trust, Secure by Design, Cloud Security (Azure and/or AWS), Identity & Access Management, Security Operations and Threat Detection, and Software Bill of Materials.
Culture and Commitment
- Emerson prioritizes a workplace where employees are valued, respected, and empowered to grow.
- Innovation, collaboration, and diverse perspectives are encouraged.
- Ongoing career development and an inclusive culture are supported to help employees thrive.
- Employee wellbeing is recognized as important.
Work Authorization
- Emerson will only employ individuals legally authorized to work in the United States.
- No sponsorship will be provided for this position.
- Certain temporary visa holders, including E, F-1 (including OPT or CPT), H-1, H-2, L-1, B, J, and TN, or individuals who require sponsorship for work authorization now or in the future, are not eligible for hire.
Accessibility Assistance or Accommodation
If you have a disability and have difficulty accessing or using the website to apply for a position, contact: [email protected].