Senior Cyber security Engineer

Role overview

Senior Cyber security Engineer at Emerson India

We are seeking a skilled Product Security Verification & Validation Engineer, Grade B3 – B5, to join our dynamic Fluid and Motion Control Team, Functionally Reporting to Team Leader at Emerson Innovation Center- Pune.

In This Role, Your Responsibilities Will Be: Work as per the direction from BU Product Security Officer / Lead.

For This Role, You Will Need: Bachelor's degree and/or equivalent years of relative experience. 3-5 years of experience and familiarity with product security standards and initiatives or practical work experience related to the verification and validation of products, services, and solutions.

Responsibilities

• Create security test plan and associated test artefacts to support BU Product Certification efforts.

Preferred qualifications and skills

• Experience in industrial control systems (ICS), embedded systems, or network security is preferred.
• That Set You Apart: Master’s degree or equivalent experience in electronics engineering or related field.
• Familiarity with penetration testing tools (e.g., Metasploit, Wireshark, Burp Suite).
• Familiarity with hardware design and debugging.
• Understanding of network protocols (TCP/IP, HTTPS, SSH, SNMP, OPC-UA, MQTT).
• Understanding of firewalls, IDS/IPS, endpoint security, and access control systems.
• Experience with secure coding practices and code review processes.
• Prior experience in the industrial/ factory automation or control systems industry.
• Our Culture & Commitment to You: At Emerson, we are committed to fostering a culture where every employee is valued and respected for their unique experiences and perspectives.
• We believe a diverse and inclusive work environment contributes to the rich exchange of ideas and diversity of thoughts, that inspires innovation and brings the best solutions to our customers.
• This philosophy is fundamental to living our company’s values and our responsibility to leave the world in a better place.
• Learn more about our Culture & Values and about Diversity, Equity & Inclusion at Emerson .
• If you have a disability and are having difficulty accessing or using this website to apply for a position, please contact: idisability.administrator@emerson.com .

Employment details

• Location: PUNE [MAHARASHTRA] [India]

Additional role details

• The candidate is a business unit central point of coordination for secure product testing, documentation, vulnerabilities management, compliance and will work closely with BU product security lead / Officer.
• This includes establishing, cultivating, participating in, and managing communities of practices supporting product security and organizing activities and meetings with decision makers.
• This position will also coordinate with Emerson Enterprise Product Security resources to ensure compliance with Emerson’s Product Security requirements for all product testing activities, processes, and tools.
• Own Security Verification and Validation activity for all products and execute the tests below for every major and minor release: Security requirement testing Threat Mitigation testing Static Code Analysis Attack surface analysis Software composition analysis Coordinate with independent penetration test team (GCC) for: Abuse case / Fuzz testing Known Vulnerability scanning Penetration test PSIRT specific test Support development team for validating fixes prior to sharing build with independent penetration test team.
• Collaborate with Product Security engineer for handling PSIRT and vulnerability management activities.
• Generate Project Metrics as per EIC-Pune and / or Business Unit Guidelines Report Local Manager for All the activities Contribute to EIC-Pune Assigned Initiatives Should be able to work in Engineering Laboratory for Product & System Level Testing following Safety Practices & Guidelines.
• Who You Are: As a Product Security Verification and Validation Engineer, you are proficient in threat modeling, risk assessment, and integrating security validation into CI/CD pipelines while ensuring compliance with industry cybersecurity standards.
• You ensure embedded products are resilient against real-world attacks while meeting regulatory and industry cybersecurity standards.
• Knowledge of cybersecurity standards and frameworks (IEC 62443, ISO 27001, NIST, OWASP).
• Familiarity with risk assessment methodologies and CVSS scoring.
• Experience in secure by design principles, best practices and the integration of security into preexisting development practices.
• Familiar with concepts such as secure development lifecycle, secure by design, and defense in depth.
• Familiar with Microsoft Office tools for effective communications and information management.
• Ability to organize, prepare and make compelling presentations.
• Self-motivated and able to work under tight timeline.
• Strong problem solving / interaction management skills.
• Strong organizational and collaboration skills.
• Respect Company’s Values and Ethics.