Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.
We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!
Job Description
The Senior / Firmware Security Engineer responsible for product-level cybersecurity design, implementation, testing, and remediation activities for embedded industrial automation products. This role provides technical leadership within project teams and drives the adoption of secure development practices while mentoring engineers and collaborating with global stakeholders.
Your Responsibilities:
- Design, development, debug, test, and maintenance of embedded firmware security features using C/C++.
- Drive implementation of Secure Boot, secure firmware updates, authentication, encryption, key management, certificate management and secure communications.
- Develop threat modeling, conduct security reviews, risk assessments, and vulnerability remediation activities.
- Perform static code analysis & fixing
- Maintain traceability between requirements, implementation, and verification activities.
- Mentor engineers and contribute to secure development processes and standards.
- Collaborate with firmware, hardware, systems, quality, and product security teams globally.
- Investigate and resolve complex cybersecurity and firmware issues.
- Act as a security subject matter expert
- Investigations of critical security vulnerabilities and field-reported cybersecurity issues, driving resolution across multiple teams.
- Develop and improve enterprise-wide engineering processes, security verification methodologies, development standards, and best practices.
- Evaluate emerging cybersecurity technologies, industry trends, standards, and threats to influence future product security strategies.
- Ensure adherence to quality systems, secure development processes, information protection policies, intellectual property requirements, and regulatory compliance obligations.
The Essentials - You Will Have:
- Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.
- Master's degree preferred.
- Minimum 2+ years of embedded firmware development experience.
- Minimum 2+ years of experience focused on firmware security, cybersecurity engineering, or embedded product security.
- Candidates with more than 4 years' experience in the embedded security development area might be offered Senior Engineer position.
- Candidates with more than 4 years' experience in the embedded security development area might be offered Senior Engineer position.
- Demonstrated technical leadership across multiple products, projects, or technology platforms.
- Proven experience leading cybersecurity initiatives and influencing architectural decisions.
- Proficiency in embedded systems and real-time firmware development using C/C++.
- Embedded security architecture and secure product development.
- Good understanding of:Secure BootCryptography and PKISecure Firmware UpdatesSecure StorageKey Management SystemsSecurity ProtocolsTCP/IP NetworkingDevice Authentication Frameworks
- Experience with threat modeling methodologies and security risk assessments.
- Experience with penetration testing, security assessment tools, and vulnerability management processes.
- Proficiency in Python or similar scripting languages.
- Experience with DevOps and security automation practices.
The Preferred - You Might Also Have:
- Expertise in IEC 62443 and industrial cybersecurity frameworks.
- Security certifications such as CISSP, GICSP, CSSLP, GIAC, or equivalent.
- Experience with industrial control systems and industrial automation products.
- Experience influencing organizational cybersecurity strategy and governance.
What We Offer:
Our benefits package includes …
- Comprehensive mindfulness programs with a premium membership to Calm
- Volunteer Paid Time off available after 6 months of employment for eligible employees
- Company volunteer and donation matching program – Your volunteer hours or personal cash donations to an eligible charity can be matched with a charitable donation.
- Employee Assistance Program
- Personalized wellbeing programs through our OnTrack program
- On-demand digital course library for professional development
... and other local benefits!
At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.
#LI-Hybrid
#LI-KV1
Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.
Skills Required
- Bachelor of Science in Computer Science, Computer Engineering, Electrical Engineering, or equivalent
- Master's degree
- At least 2 years of embedded firmware development experience
- At least 2 years of firmware security, cybersecurity engineering, or embedded product security experience
- Technical leadership across multiple products, projects, or technology platforms
- Experience leading cybersecurity initiatives and influencing architectural decisions
- Proficiency in embedded systems and real-time firmware development using C/C++
- Experience with embedded security architecture and secure product development
- Knowledge of Secure Boot, cryptography, PKI, secure firmware updates, secure storage, key management, security protocols, TCP/IP networking, and device authentication
- Experience with threat modeling methodologies and security risk assessments
- Experience with penetration testing, security assessment tools, and vulnerability management processes
- Proficiency in Python or similar scripting languages
- Experience with DevOps and security automation practices
- Expertise in IEC 62443 and industrial cybersecurity frameworks
- Security certification such as CISSP, GICSP, CSSLP, GIAC, or equivalent
- Experience with industrial control systems and industrial automation products
- Experience influencing organizational cybersecurity strategy and governance
Rockwell Automation Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Rockwell Automation and has not been reviewed or approved by Rockwell Automation.
-
Healthcare Strength — Healthcare coverage is described as comprehensive, spanning medical, dental, vision, mental‑health support, disability and life insurance, and wellness resources. Multiple plan choices and supportive programs contribute to the package feeling well‑rounded.
-
Retirement Support — Retirement benefits include a 401(k)/Retirement Savings Plan with employer matching that is positioned as a meaningful part of total compensation. These offerings reinforce longer‑term financial security as a core strength.
-
Parental & Family Support — Paid parental leave was expanded and a paid caregiver leave was added, indicating clear support for family needs. These policies are complemented by flexibility signals and dedicated paid volunteer time.
Rockwell Automation Insights
What We Do
At Rockwell Automation, we connect the imaginations of people with the potential of technology to expand what is humanly possible, making the world more intelligent, more connected and more productive.
.jpeg)
