Senior / Firmware Security Engineer

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description

The Senior / Firmware Security Engineer responsible for product-level cybersecurity design, implementation, testing, and remediation activities for embedded industrial automation products. This role provides technical leadership within project teams and drives the adoption of secure development practices while mentoring engineers and collaborating with global stakeholders.

Your Responsibilities:

• Design, development, debug, test, and maintenance of embedded firmware security features using C/C++.
• Drive implementation of Secure Boot, secure firmware updates, authentication, encryption, key management, certificate management and secure communications.
• Develop threat modeling, conduct security reviews, risk assessments, and vulnerability remediation activities.
• Perform static code analysis & fixing
• Maintain traceability between requirements, implementation, and verification activities.
• Mentor engineers and contribute to secure development processes and standards.
• Collaborate with firmware, hardware, systems, quality, and product security teams globally.
• Investigate and resolve complex cybersecurity and firmware issues.
• Act as a security subject matter expert
• Investigations of critical security vulnerabilities and field-reported cybersecurity issues, driving resolution across multiple teams.
• Develop and improve enterprise-wide engineering processes, security verification methodologies, development standards, and best practices.
• Evaluate emerging cybersecurity technologies, industry trends, standards, and threats to influence future product security strategies.
• Ensure adherence to quality systems, secure development processes, information protection policies, intellectual property requirements, and regulatory compliance obligations.

The Essentials - You Will Have:

• Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.
• Master's degree preferred.
• Minimum 2+ years of embedded firmware development experience.
• Minimum 2+ years of experience focused on firmware security, cybersecurity engineering, or embedded product security.
• Candidates with more than 4 years' experience in the embedded security development area might be offered Senior Engineer position.
• Candidates with more than 4 years' experience in the embedded security development area might be offered Senior Engineer position.
• Demonstrated technical leadership across multiple products, projects, or technology platforms.
• Proven experience leading cybersecurity initiatives and influencing architectural decisions.
• Proficiency in embedded systems and real-time firmware development using C/C++.
• Embedded security architecture and secure product development.
• Good understanding of:Secure BootCryptography and PKISecure Firmware UpdatesSecure StorageKey Management SystemsSecurity ProtocolsTCP/IP NetworkingDevice Authentication Frameworks
• Experience with threat modeling methodologies and security risk assessments.
• Experience with penetration testing, security assessment tools, and vulnerability management processes.
• Proficiency in Python or similar scripting languages.
• Experience with DevOps and security automation practices.

The Preferred - You Might Also Have:

• Expertise in IEC 62443 and industrial cybersecurity frameworks.
• Security certifications such as CISSP, GICSP, CSSLP, GIAC, or equivalent.
• Experience with industrial control systems and industrial automation products.
• Experience influencing organizational cybersecurity strategy and governance.

What We Offer:

Our benefits package includes …

• Comprehensive mindfulness programs with a premium membership to Calm
• Volunteer Paid Time off available after 6 months of employment for eligible employees
• Company volunteer and donation matching program - Your volunteer hours or personal cash donations to an eligible charity can be matched with a charitable donation.
• Employee Assistance Program
• Personalized wellbeing programs through our OnTrack program
• On-demand digital course library for professional development

... and other local benefits!

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.