Product Security Engineer

If you are a cyber security professional looking for an opportunity to grow, Emerson has an exciting opportunity for you! 

Based in our Marshalltown, Iowa location, you will be responsible for coordinating and promoting product security activities across multiple product development teams. This position will create awareness and drive adoption of secure development methods that achieve secure products services, and solutions. 

Additionally, the individual selected for this role will be a business unit central point of coordination for secure product development processes, policy and standards implementation, and compliance. This includes establishing, cultivating, participating in, and running communities of practices supporting product security and organizing activities and meetings with decision makers. This position will also coordinate with Emerson Enterprise Product Security resources to ensure compliance with Emerson’s Product Security requirements for all product development activities, processes, and tools.

 

In this Role, Your Responsibilities Will Be:

• Coordinate and lead the implementation of secure development lifecycle efforts.
• Participate in new product development process audits and assessments.
• Participate in key projects as the product security functional representative.
• Work with business units to inventory products and assist in prioritizing risk.
• Organize and run product risk assessments and threat modeling efforts.
• Assist in organizing activities including the Product Security Board, Product Security Team, and program meetings to expand and sustain efforts across business units, groups.
• Create, organize and participate in cross functional and business unit communities to promote product security standard methodologies.
• Maintain artifacts and a central repository of communications and information for Emerson Product Security functions and teams.
• Assist with analyzing product security market and technology trends.
• Assist with training and development needs for various organizational functions specific to product security related roles and functions.
• Maintain familiarity with industry standards such as IEC 62443 (ISA99), IEC 29147, IEC 30111, ISO/IEC 27001, and NIST SP 800-218.
• Support the organizational Product Security Incident Response Team and vulnerability management activities.
• Establish and enhance strong relationships with business unit team members, organizational functions, and business partners.
   

  Who You Are:
You pursue everything with energy, drive, and the need to finish. You always keep the end in sight and put in extra effort to meet deadlines. You create teamwork allowing others across the organization to achieve shared objectives. You partner with others to get work done. You achieve gained trust and support of others. You ask the right questions to accurately analyze situations. You evaluate pros and cons, risks and benefits of different solution options.
    For This Role, You Will Need:

• Bachelor's degree and/or equivalent years of relative experience.
• 1+ years of experience and familiarity with product security standards and initiatives or practical work experience related to the implementation of products, services, and solutions.
• Experience in secure by design principles, best practices and the integration of security into preexisting development practices.
• Ability to organize, prepare and make compelling presentations.
• Self-motivated and able to work under tight timeline.
• Strong problem solving / interaction management skills.
• Strong organizational and collaboration skills.
• Up to 25% travel expected.
• Legal authorization to work in the United States.
• Familiar with concepts such as secure development lifecycle, secure by design, and defense in depth.
• Familiar with Microsoft Office tools 
   

Preferred Qualifications that Set You Apart:

• Risk Management Framework and Processes experience.
• Experience with standards and risk management frameworks (e.g. IEC 62443, IEC 27001, NIST SP 800-218, COBIT, NIST).
• Knowledge of technology trends and current product security issues, including those specific to control systems and related products.
• Experience with project management and development processes.
• Experience working with recognized security related standards and technologies.
• Experience with software bills of material (SBOM).

   Our Culture & Commitment to You​

​

At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encou