Embedded Security Developer

Emerson Ltd
Killin, United Kingdom
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior

Job location

Killin, United Kingdom

Tech stack

Microsoft Windows
Unit Testing
Azure
C++
Static Program Analysis
Code Review
Computer Security
Computer Programming
Linux
DNS
Embedded Software
Hardware Interface Design
Hypertext Transfer Protocols (HTTP)
Key Management
Modbus
Network Protocols
Open Web Application Security
Real-Time Operating Systems
Secure Coding
TCP/IP
Information Technology
Devsecops

Job description

  • Perform security requirements analysis, conduct risk analysis and threat modelling
  • Ensure secure design principles are applied such as the least privilege, defence in depth, and secure defaults
  • Ensure secure implementation of requirements and threat mitigations, including:
  • Follow secure coding guidelines to prevent common vulnerabilities (e.g., buffer overflows, injection flaws)
  • Application of Static Code Analysis to identify security vulnerabilities in code
  • Application of Software Composition Analysis to ensure supply chain security
  • Unit testing and code reviews
  • Defect analysis and remediation
  • Ensure alignment with internal procedures and relevant standards (e.g., IEC 62443, ISO 27001)
  • Support internal and external audits as required
  • Drive continuous improvement by staying updated on emerging threats, tools, and standard methodologies
  • Occasional travel may be required, such as training or customer support.

Requirements

You are deeply technical, with validated understanding of C/C++, hardware interfaces, encryption, and secure boot/load chains. You are methodical, resourceful, and skilled at working within constrained environments like limited memory or processing power., * Proven ability with a minimum 5 years of experience in developing embedded firmware

  • Engineering degree or equivalent experience in Software, Computer Science, Cybersecurity
  • Strong C/C++ programming skills
  • Understanding of encryption algorithms, key management, and secure protocols (TLS, SSH, etc.)
  • Proficient knowledge of prevalent weaknesses (for example, OWASP Top 10, CWE/SANS Top 25)
  • Familiarity with Linux, Windows, RTOS and network protocols (TCP/IP, DNS, HTTP/S)
  • Understanding of industrial protocols (e.g., Serial, Modbus, HART)
  • Familiarity with industry norms such as IEC 62443, ISO 27001, NIST, and OWASP
  • Proficient in implementing DevSecOps methodologies; Familiarity with Azure DevOps is beneficial
  • Self directed and motivated in a team orientated environment

Preferred Qualifications That Set You Apart:

  • Experience implementing DevSecOps standard methodologies; Azure DevOps experience is a plus

About the company

At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives-because we know that great ideas come from great teams. Our dedication to ongoing career development and growing an inclusive culture ensures you have the support to thrive! Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results. We recognise the importance of employee well-being. We prioritise in providing competitive benefit plans, including Private Medical cover, Employee Assistance Program, Employee Resource Groups, recognition and much more. Make this great opportunity yours!

Apply for this position