- Company Name
- Emerson
- Job Title
- Embedded Security Developer
- Job Description
-
**Job Title:** Embedded Security Developer
**Role Summary:**
Design, develop, and secure embedded firmware for industrial and connected devices. Conduct risk and threat analysis, apply secure design principles, implement secure coding practices, perform static and composition analysis, and maintain compliance with security standards such as IEC 62443, ISO 27001, and NIST. Support audits, drive continuous improvement, and collaborate across development and security teams.
**Expectations:**
- Minimum 5 years of embedded firmware development.
- Deep expertise in C/C++ and hardware interfaces.
- Strong knowledge of encryption, key management, secure boot/load chains, and secure protocols (TLS, SSH).
- Familiarity with industrial networking (Serial, Modbus, HART) and RTOS.
- Proficiency in static code and software composition analysis.
- Understanding of OWASP Top 10, CWE/SANS Top 25, and ISO/IEC security standards.
- Experience with DevSecOps practices; Azure DevOps exposure preferred.
- Self‑directed, detail‑oriented, and capable of working in constrained environments.
- Ready for occasional travel (training, customer support, audits).
**Key Responsibilities:**
- Perform security requirements analysis, risk assessment, and threat modelling.
- Apply secure design principles: least privilege, defense‑in‑depth, secure defaults.
- Enforce secure coding guidelines; prevent buffer overflows, injection flaws, etc.
- Conduct static code analysis and software composition checks for supply‑chain risk.
- Write and execute unit tests, review code, and remediate defects.
- Ensure alignment with IEC 62443, ISO 27001, and other relevant objectives.
- Support internal/external audit activities.
- Monitor emerging threats, tools, and methodologies; recommend improvements.
**Required Skills:**
- Proficient C/C++ programming in embedded contexts.
- Knowledge of secure boot, enclave concepts, and firmware signing.
- Encryption algorithms, key lifecycle, and secure protocol implementation.
- Static code analysis (e.g., cppcheck, Coverity).
- Software composition analysis (e.g., Black Duck, Snyk).
- Unit testing frameworks (e.g., Unity, Ceedling).
- Linux/Windows/RTOS debugging and networking stack proficiency.
- Understanding of IEC 62443, ISO 27001, NIST frameworks.
- DevSecOps tooling, CI/CD pipelines, and Azure DevOps expertise (preferred).
- Familiarity with OWASP, CWE/SANS, industrial protocols, and network protocols (TCP/IP, DNS, HTTP/S).
**Required Education & Certifications:**
- Bachelor’s degree in Engineering, Computer Science, Cybersecurity, or equivalent experience.
- Certifications in relevant security standards (e.g., ISO 27001 Lead Auditor, IEC 62443) are advantageous but not mandatory.
Cumbernauld, United kingdom
Hybrid
Mid level
01-02-2026