Senior / Firmware Security Engineer

About the role

Rockwell Automation is hiring a Senior / Firmware Security Engineer in Singapore to own product-level cybersecurity design, implementation, testing and remediation for embedded industrial automation products. The role provides technical leadership within project teams, promotes secure development practices and mentors engineers while working with global stakeholders.

Key responsibilities

• Design, develop, debug, test and maintain embedded firmware security features in C/C++
• Implement Secure Boot, secure firmware updates, authentication, encryption, key and certificate management and secure communications
• Develop threat models, run security reviews, risk assessments and vulnerability remediation, and perform static code analysis and fixes
• Maintain traceability between requirements, implementation and verification
• Mentor engineers and collaborate with firmware, hardware, systems, quality and product security teams globally
• Investigate critical vulnerabilities and field-reported issues, and act as a security subject matter expert
• Improve engineering processes, security verification methods and development standards, and evaluate emerging cybersecurity trends
• Ensure compliance with quality systems, information protection policies, IP requirements and regulations

Required profile

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent; Master's preferred
• Minimum 2+ years of embedded firmware development and 2+ years in firmware security, cybersecurity engineering or embedded product security
• Candidates with more than 4 years of embedded security experience may be offered a Senior Engineer position
• Demonstrated technical leadership and proven experience leading cybersecurity initiatives and influencing architectural decisions

Required skills

• Embedded systems and real-time firmware development in C/C++
• Good understanding of Secure Boot, cryptography and PKI, secure firmware updates, secure storage, key management, security protocols, TCP/IP networking and device authentication frameworks
• Threat modeling, penetration testing, security assessment tools and vulnerability management
• Python or similar scripting, DevOps and security automation
• Preferred: IEC 62443, industrial control systems, and certifications such as CISSP, GICSP, CSSLP or GIAC

What we offer

• Hybrid work: onsite at a Rockwell location at least Monday, Tuesday and Thursday
• Mindfulness programs with a premium Calm membership
• Paid volunteer time off after 6 months, plus volunteer and donation matching
• Employee Assistance Program and personalized wellbeing programs
• On-demand digital course library and other local benefits