Product Security Engineer
Emerson · Pune
In this Role, your responsibilities will be:
- Execute product security controls such as secure boot, firmware integrity checks, authentication, and vulnerability mitigation.
- Participate in firmware/software requirement analysis, documentation, and threat modeling activities.
- Perform integration, system, and regression testing for embedded products.
- Execute security test cases including fuzzing, protocol security validation, and cryptographic checks.
- Conduct vulnerability scanning and document findings as per CVE/CWE standards.
- Validate security controls against IEC 62443-4-2 component requirements.
- Support development of automated test scripts using Python/scripting.
- Analyze and validate industrial communication protocol security (HART, Modbus, Ethernet/IP, ProfiNet).
- Collaborate with cross-functional engineering teams to support security deliverables.
WHO YOU ARE
You demonstrate strong energy, ownership, and a bias for action, balancing disciplined planning with effective execution. You show learning agility by quickly acquiring new skills, applying feedback, and strengthening core engineering fundamentals. You approach problems with structured thinking and sound engineering judgment to deliver practical solutions. You collaborate effectively across teams, leverage expertise when needed, and operate independently with accountability to deliver results.
For This Role, You Will Need:
- Bachelor's or Master's degree in computer science / Electronics/ Instrumentation or related field
- Overall 4-6 yrs of experience in embedded systems or product Verification and Validation and Product Security
Required Qualifications:
- Experience with firmware/hardware integration and security testing.
- Strong understanding of penetration testing methodologies and tools.
- Threat modeling and vulnerability analysis expertise.
- Experience with vulnerability scanning tools such as Nessus, OpenVAS, or Qualys.
- Familiarity with fuzzing tools (AFL, libFuzzer).
- Knowledge of industrial protocol security (HART, Modbus).
- Python scripting for test automation.
-
Familiarity with OWASP Embedded Top 10 and CWE/CVE databases.
Our Culture & Commitment to You
At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives—because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results.
We recognize the importance of employee wellbeing. We prioritize providing competitive benefits plans, a variety of medical insurance plans, Employee Assistance Program, employee resource groups, recognition, and much more. Our culture offers flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave.
This role is responsible for the design, development, and testing of product security requirements for embedded industrial products. It demands strong technical expertise in secure development practices, security controls validation, and vulnerability assessment. Based in our Pune, India location, you will be part of the newly formed Cross Portfolio Technology and Innovation team within Emerson. You will be employed at the Emerson Innovation Centre, Pune (EICP).