Product Security Engineer - Embedded Devices

Job Description:
Our client, a large hardware manufacturer is looking for a Product Security Engineer. This role will cover aspects of security engineering and compliance on embedded devices sold by our client. Relevant candidates include those who have worked on embedded software security and have some experience going through compliance audits for products, especially IEC 62443.
This is a fulltime direct hire role with a strong compensation plan, great benefits, and strong opportunity for career advancement.

This role is ON-SITE and can be located in one of the following cities:
Cleveland, OH
Fort Lauderdale, FL
Huntsville, AL
Detroit, MI
Columbus, OH

Responsibilities:

• Conduct thorough security assessments and threat modeling for embedded devices in OT environments.
• Design and implement security controls, configurations, and best practices to mitigate vulnerabilities and threats specific to embedded OT systems.
• Collaborate with firmware and hardware engineering teams to embed security features and mechanisms during the development lifecycle of OT devices.
• Perform security testing, including vulnerability assessments, penetration testing, and security code reviews, to identify and remediate risks.
• Develop and enforce security policies, standards, and procedures
• Monitor and respond to security incidents
• Work closely with OT operations teams to ensure security measures align with operational requirements and do not impact system functionality.
• Provide guidance and training to stakeholders on security best practices and compliance requirements for embedded OT devices.

Qualifications:

• 5+ years of experience in product security engineering, with a focus on securing embedded devices in OT environments.
• Hands-on experience with security tools and techniques for embedded systems (e.g., secure boot, cryptography, secure coding practices).
• Familiarity with cybersecurity standards and regulations relevant to OT environments (e.g., IEC 62443).
• Proven ability to assess security risks, conduct security testing, and implement effective security controls for embedded OT devices.
• Excellent analytical and problem-solving skills, with meticulous attention to detail.
• Strong communication and interpersonal skills; ability to collaborate effectively across technical and non-technical teams.