Application Security Analyst

The Security Analyst will be responsible for helping to build and support Threat and Vulnerability Management’s security services. This position will perform security penetration testing on Emerson’s products, perform internal red team engagements and other special projects such as threat modeling. This position will interface with the Emerson platform group information security leaders, application leaders and development teams to provide timely security testing, reporting, guidance and assist with remediation where applicable. PRINCIPAL FUNCTIONAL RESPONSIBILITIES - Perform product security testing and reporting, to include- Black box reverse engineering of hardware and firmware - Vulnerability research - Exploit development - Fuzz testing - Protocol reverse engineering - Conduct internal red team engagements - Facilitate threat modeling in coordination with Emerson application, infrastructure and product teams. - Perform Security training and outreach to internal development teams - Maintain service documentation and metrics

Qualifications:

REQUIRED EDUCATION, EXPERIENCE & SKILLS: - Bachelor’s Degree in Computer Science, Computer Engineering, Cybersecurity, or related field. Other majors will be considered for candidates with desired skillsets. - EXPERIENCE/SKILLS - Minimum of 3 years’ experience with any combination of the following: embedded systems and IoT security, red teaming, or penetration testing - Experience conducting security testing of embedded hardware / ability to identify and manipulate debug interfaces (UART, JTAG, SWD, etc.) and peripheral buses (SPI, I2C, etc.) - Binary Reverse Engineering of ARM, MIPS, PowerPC firmware using industry standard tools such as IDA Pro, Binary Ninja, Ghidra, etc - Experience in Fuzz Testing of industrial communication protocol like WiFi / BLE / WirelessHART / PROFINET/ MODBUS / Ethernet IP/ OPC UA/ HART /FF - Understanding of secure libraries (e.g. bootloader etc...) - Knowledge of embedded Linux required, knowledge of Real Time Operating Systems a plus - Understanding of various network, web, IoT, and industrial related protocols (such as, TCP/UDP, HTTPS, MQTTS, CoAP, Modbus, EtherNet/IP, DNP3, OPC-UA, etc.) - Understanding of cloud solutions and architectures supporting IoT and Edge computing environments - Experience with programming languages such as, Python, C#, C/C , Ruby, etc - Excellent written and verbal communication skills - Strong sense of ownership, urgency, and drive - Sharp analytical skills with the ability to synthesize new information quickly WHY EMERSON? Our Commitment to Our People Across the globe, we are united by a singular Purpose: We drive innovation that makes the world healthier, safer, smarter, and more sustainable. We invest in our employees to ensure they have the marketplace knowledge, skills, and competencies to bring this Purpose to life while competing and leading in a global economy. Our training programs focus on end-to-end development, from onboarding through senior leadership. Our success is measured by the positive impact we make on people, our communities, and the world through our unwavering focus on environmental, social, and regulatory progress. Learn more about us! Flexible and competitive benefits plans offer you the right options to meet your individual and family needs: medical insurance plans, dental and vision coverage, 401(k), tuition reimbursement and more. We also provide you flexible time-off plans, including paid parental leave, vacation, and holiday leave. Our Commitment to Diversity, Equity & Inclusion At Emerson, we are committed to fostering a culture where every employee is valued and respected for their experiences and perspectives – and that reflects the world around us. We believe a diverse, equitable and inclusive work environment contributes to the rich exchange of ideas that inspires innovation and brings the best solutions to our customers. This philosophy is fundamental to living our company’s values and our responsibility to leave the world in a better place. Learn more about our Culture & Values and Diversity, Equity & Inclusion at Emerson. Work Authorization Emerson will only employ those who are legally authorized to work in the United States. This is not a position for which sponsorship will be provided. Individuals with temporary visas such as E, F-1, H-1, H-2, L, B, J or TN, or who need sponsorship for work authorization now or in the future, are not eligible for hire. Equal Opportunity Employer Emerson is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, age, marital status, political affiliation, sexual orientation, gender identity, genetic information, disability or protected veteran status. We are committed to providing a workplace free of any discrimination or harassment. If you have a disability and are having difficulty accessing or using this website to apply for a position, please contact: idisability.administrator@emerson.com.