Senior Product Security Engineer

Emerson is hiring a Senior Product Security Engineer in Shakopee, MN to lead product security for industrial sensing, connectivity, software, and cloud programs. The role focuses on embedding security across the product lifecycle to help meet EU Cyber Resilience Act and IEC 62443 expectations.

Key Responsibilities

• Act as Product Security Lead for assigned industrial automation products, connectivity platforms, software applications, and cloud solutions.
• Drive secure development lifecycle (SDL) activities and ensure product security requirements are defined, implemented, and verified across development.
• Collaborate with hardware, firmware, software, and cloud teams to shape secure architectures and incorporate cybersecurity best practices.
• Lead cybersecurity risk assessments, threat modeling, and product security planning to identify and mitigate security risks.
• Support security testing, including vulnerability assessments, penetration testing, code analysis, and remediation work.
• Manage product security vulnerabilities, partnering cross-functionally to investigate, prioritize, and resolve cybersecurity issues.
• Support compliance with industry cybersecurity standards, regulations, certifications, and customer security requirements.
• Provide technical guidance, training, and mentorship to engineering teams while strengthening a product cybersecurity culture.
• Monitor emerging cybersecurity threats, technologies, and industry trends to continuously improve product security practices.

Required Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field.
• 5+ years of experience in software, firmware, systems engineering, or cybersecurity, including support for product or embedded/IoT security.
• Knowledge of SDL practices, threat modeling, security risk assessments, vulnerability management, and secure design principles.
• Familiarity with cybersecurity frameworks and standards, including CWE, CVE, CVSS, and OWASP.
• Experience programming in C, C++, Java, or Python.
• Working knowledge of Linux, networking fundamentals, and cybersecurity best practices.
• Strong communication and collaboration skills, including the ability to work across global, cross-functional teams.
• Legal authorization to work in the United States.
• Authorized to work in the United States without sponsorship now and in the future. Individuals with temporary visas such as E, F-1 (including OPT or CPT), H-1, H-2, L-1, B, J, or TN, or who need sponsorship for work authorization now or in the future, are not eligible for hire.

Technologies

• C, C++
• Java, Python
• Linux
• CWE, CVE, CVSS, OWASP
• IEC 62443, EU Cyber Resilience Act
• SDL (secure development lifecycle)

Preferred Qualifications

• Experience securing industrial automation, industrial IoT, or operational technology (OT) products and protocols.
• Knowledge of industry cybersecurity standards and regulations, including IEC 62443, NIST SSDF, and the EU Cyber Resilience Act.
• Experience with cloud and container security technologies, such as Azure, AWS, Docker, or Kubernetes.
• Experience with penetration testing, fuzzing, vulnerability assessment, and code analysis tools.
• Familiarity with SBOM standards, software supply chain security, and software composition analysis.
• Industry certifications such as CISSP, CSSLP, GICSP, OSCP, or ISA/IEC 62443 Cybersecurity Expert.
• Experience mentoring engineers and providing technical leadership on cybersecurity initiatives.

Compensation and Location

• Location: Shakopee, MN (onsite)
• Salary: USD 115,000 - 140,000 per year

Benefits

• Medical insurance plans (variety of medical insurance plans)
• Dental and vision coverage
• Employee Assistance Program
• Profit sharing retirement
• Tuition reimbursement
• Employee resource groups
• Recognition
• Flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave
• Competitive base salary
• Reward performance during annual merit review process

Work Authorization

Emerson will only employ individuals who are legally authorized to work in the United States. This position does not provide sponsorship.