DevOps Security Engineer

About the Role

Key Responsibilities

• Coordinate and manage implementation of Secure Development Lifecycle efforts including CI/CD pipelines and DevOps tools and processes
• Participate in New Product Development process audits assessments
• Participate in key projects as a DevSecOps functional representative
• Work with the product group to inventory products and assist in prioritizing risk
• Coordinate, participate and collaborate cross functionally with the product group to promote the adoption of DevSecOps standard methodologies
• Maintain relative artifacts and central repository of communications and information for Emerson Cybersecurity function and teams to the Magmeter and Vortex product group
• Assist with security and penetration test cases and approaches
• Maintain familiarity with industry standards such as IEC 62443 (ISA99) and ISO/IEC 27001
• Establish and enhance strong relationships with product group team members, adjacent organizational functions, and business partners to harmonize on tools and process
• Establish and coordinate training activities for design engineers, test engineers, and others as needed DevSecOps users
• Assist with user-facing product security information generation and review
• Assist with Software Bill of Materials (SBOM) for products

Requirements

• Bachelor's in Computer Engineering, Computer Science, Cybersecurity or a similar degree from an Engineering or Science School
• Minimum of 3 years of experience supporting software delivery using automation tools
• Advanced knowledge of DevOps tools (e.g., GitHub Actions, GitLab CI/CD, Jenkins, Azure DevOps, SAST, DAST, container security)
• Familiar with concepts such as 'defense in depth' and Secure Development Lifecycle
• Familiar with Microsoft tools for effective communications and information management
• Experience working with recognized IT Security related standards and technologies
• Experience in software security design principles, standard methodologies, and the integration of security into preexisting development processes
• Up to 10% travel expected
• Legal authorization to work in the United States

Nice to Have

• Experience with cybersecurity standards (e.g. IEC 62443)
• Experience with Azure DevOps
• Knowledge of container security, software signing, and secure software distribution methods
• Ability to organize, prepare and make compelling presentations
• Experience Software Development, Project Management, and Configuration Management processes
• Self-motivated and able to work under tight timeline
• Strong problem-solving skills
• Strong organizational and collaboration skills

Qualifications

• Bachelor's degree in a relevant field such as Computer Engineering, Computer Science, or Cybersecurity

Benefits & Perks

• Flexible, competitive benefits plans including medical insurance, dental, and vision coverage
• Employee Assistance Program
• 401(k)
• Tuition reimbursement
• Employee resource groups
• Recognition programs
• Flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave