Sr. Product Security Engineer

In This Role, Your Responsibilities Will Be:

• Perform penetration testing and security assessments of web applications, APIs, mobile applications, and thick-client applications.
• Analyze product architecture and attack surfaces to develop effective security test scenarios.
• Identify, validate, assess, and document security vulnerabilities.
• Prepare clear security assessment reports with findings, risk, evidence, and remediation recommendations.
• Collaborate with development and product teams on vulnerability remediation and perform retesting.
• Contribute to security testing methodologies, tools, automation, and continuous improvement.

Who You Are:

You are a hands-on security professional with strong analytical and problem-solving skills. You are curious about how products and applications work, can think from an attacker's perspective, and can effectively communicate security findings and remediation recommendations to engineering teams.

For this Role, You Will Need:

• Bachelor’s degree in computer science, Information Technology, Electronics, Cybersecurity, or a related engineering discipline.
• 5+ years of relevant experience in cybersecurity, penetration testing, application security, or product security.
• Hands-on experience in web application and API penetration testing.
• Good understanding of application security vulnerabilities, authentication, authorization, session management, network protocols, and security fundamentals.
• Experience with security testing tools such as Burp Suite, OWASP ZAP, Nmap, Nessus, Wireshark, and Kali Linux.
• Strong technical documentation and communication skills.
• Good Written and Communication Skills
• Good Analytical and Problem solving ability
• Quick learner

Nice to Have skill:

Android/mobile application security testing using tools such as ADB, MobSF, and Frida.

Thick-client application security testing.

Preferred Qualifications that Set You Apart:

Knowledge of IEC 62443, NIST SP 800-218, OWASP Top 10

Experience working with cross-functional product development and engineering teams.

Relevant cybersecurity certifications would be an added advantage. E.g. CEH, OSCP.

Our Culture & Commitment to You:

At Emerson, we are committed to fostering a culture where every employee is valued and respected for their unique experiences and perspectives. We believe a diverse and inclusive work environment contributes to the rich exchange of ideas and diversity of thoughts, that inspires innovation and brings the best solutions to our customers. This philosophy is fundamental to living our company’s values and our responsibility to leave the world in a better place. Learn more about our Culture & Values and about Diversity, Equity & Inclusion at Emerson