Staff Firmware Security Engineer

About the role

Rockwell Automation is hiring a Staff Firmware Security Engineer in Singapore. The role defines, develops and drives cybersecurity architecture, security strategy and secure development practices across multiple embedded product platforms, providing technical leadership to cross-functional teams, mentoring engineers and ensuring products meet cybersecurity standards and regulatory requirements.

Key responsibilities

• Lead the architecture, design and implementation of cybersecurity solutions across embedded and industrial automation platforms
• Define product cybersecurity strategies and integrate secure-by-design principles throughout development
• Provide technical leadership in Secure Boot, Secure Firmware Update, Cryptographic Key and Certification Management, Device Identity and Authentication, Secure Communications, Vulnerability Management, Product Hardening and Security Monitoring and Logging
• Lead architecture reviews, threat modeling, security risk assessments and mitigation planning
• Guide compliance with standards such as IEC 62443, NIST and ISA/IEC industrial security requirements
• Partner with product security, firmware, systems, hardware and quality teams to shape product architecture and roadmaps
• Lead investigations of critical vulnerabilities and field-reported security issues
• Mentor firmware and cybersecurity engineers and evaluate emerging technologies and threats
• Lead product security certification efforts and engage with customers, security researchers, certification bodies and industry groups

Required profile

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering or a related field
• 7+ years of embedded firmware development, including at least 5+ years in firmware security or embedded cybersecurity
• Demonstrated technical leadership and experience driving cybersecurity initiatives
• Preferred: knowledge of IEC 62443, security certifications (CISSP, GICSP, CSSLP, GIAC), industrial control systems experience and cybersecurity governance experience

Required skills

• Expert in C/C++ and real-time embedded systems
• Secure Boot, Cryptography and PKI, Secure Firmware Updates, Secure Storage, Key and Certification Management, Security Protocols, TCP/IP networking, Device Authentication Frameworks
• Threat modeling, penetration testing and vulnerability management
• Proficiency in Python or similar scripting languages
• Familiarity with DevSecOps and security automation

What we offer

• Hybrid work: onsite at a Rockwell location at least Monday, Tuesday and Thursday
• Mindfulness programs with a premium Calm membership
• Paid volunteer time off after 6 months and a volunteer and donation matching program
• Employee Assistance Program and personalized wellbeing programs
• On-demand digital course library and other local benefits