Full job description

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description

The Senior / Firmware Security Engineer responsible for product-level cybersecurity design, implementation, testing, and remediation activities for embedded industrial automation products. This role provides technical leadership within project teams and drives the adoption of secure development practices while mentoring engineers and collaborating with global stakeholders.

Your Responsibilities:

Design, development, debug, test, and maintenance of embedded firmware security features using C/C++.
Drive implementation of Secure Boot, secure firmware updates, authentication, encryption, key management, certificate management and secure communications.
Develop threat modeling, conduct security reviews, risk assessments, and vulnerability remediation activities.
Perform static code analysis & fixing
Maintain traceability between requirements, implementation, and verification activities.
Mentor engineers and contribute to secure development processes and standards.
Collaborate with firmware, hardware, systems, quality, and product security teams globally.
Investigate and resolve complex cybersecurity and firmware issues.
Act as a security subject matter expert
Investigations of critical security vulnerabilities and field-reported cybersecurity issues, driving resolution across multiple teams.
Develop and improve enterprise-wide engineering processes, security verification methodologies, development standards, and best practices.
Evaluate emerging cybersecurity technologies, industry trends, standards, and threats to influence future product security strategies.
Ensure adherence to quality systems, secure development processes, information protection policies, intellectual property requirements, and regulatory compliance obligations.