Job description 

Job Summary: 

If you are an Embedded Product Security Engineer looking for an opportunity to grow, Emerson has an exciting opportunity for you!  Based in our Pune, India location, you will be a member of a collaborative product Security group.  You will have the opportunity to lead Innovative embedded product Security and work with global technical leadership teams for embedded products for Emerson business units located across the globe. You’ll be employed for Emerson Innovation Centre, Pune (EICP) 

 In This Role, Your Responsibilities Will Be:

• Perform Vulnerability Analysis and Penetration testing of embedded products / applications used in Critical Infrastructure (OT/ICS domain).
• Perform firmware code reverse engineering and device security hardening.
• Perform protocol fuzz Testing of industrial communication protocol: Modbus, WiFi,  OPC-UA, PROFINET, Ethernet IP, BLE, etc.
• Guide development team across development cycle to strengthen security.
• Mentor and coach colleagues in your area of expertise.

Who you are:

  You will Anticipates customer needs and provides services that are beyond customer expectations. You will Quickly and decisively takes action in fast-changing, unpredictable situations and Assumes responsibility for the outcomes of others.

For This Role, You Will Need:

•  Experience in Vulnerability Analysis and Penetration testing of embedded products.
• Experience in firmware reverse engineering and device security hardening.
• Strong knowledge of embedded system: Micro controller and its peripherals, RTOS, Linux, memory and HSM (Hardware Security Module).
• Experience in secure C/C++ code review and use of Static Analysis tools.
• Understanding of secure libraries (e.g. bootloader etc...). 
• Strong understanding of security protocols (HTTPS, HSTS, TLS, SSH) and interfaces like UART, SPI, I2C, JTAG.
• Strong analytical skills and decision-making capabilities. 
• Proven verbal and written communications skills to work effectively at all levels of an organization. 
• Good understanding of TCP/IP, UDP, cryptographic primitives function, encryption and processing
• Excellent Knowledge of scripting language (TCL, Perl, Python, Shell etc.) for exploit development.
• Exposure to open source solutions for Root of trust like HSM, TPM, and TEE.
• Good understanding of Secure Development Lifecycle.
• Understanding IEC62443 standard.
• Possess collaboration skills and experience of working with internal/external partners.

Preferred Qualifications that Set You Apart:

•  Bachelor’s or master’s degree in computer / Electronics Engineering or related field.
• 4 – 7 years’ experience in Cybersecurity related field.
• Cybersecurity Certification preferred.