Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Product Security Lead role.
Rezi rewrites your resume against Emerson's job description. Free.
Tailor your resume to this Product Security Lead role.
Rezi rewrites your resume against Emerson's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Product Security Lead posting at Emerson — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Product Security Lead posting at Emerson — free, in seconds.
About the Role
In this role, you will lead product security activities across the product lifecycle, helping ensure that secure-by-design principles are embedded into development processes, products, and solutions. You will work cross-functionally with engineering, product management, quality, compliance, and cybersecurity teams to drive security excellence, manage cybersecurity risks, and support compliance with industry-recognized standards. This position offers the opportunity to influence product strategy, strengthen security capabilities, and contribute to solutions that make a meaningful impact for customers worldwide.
Responsibilities
- Develop, maintain, and own comprehensive product security plans, including defining security scope, objectives, deliverables and activities.
- Drive the implementation, execution, and continuous improvement of secure development lifecycle (SDL) practices in alignment with IEC 62443-4-1 requirements.
- Define and verify product security release criteria for new product development programs and ensure all required security activities, reviews, and evidence are completed before product releases.
- Establish, review, and maintain product security requirements while evaluating secure architecture and design concepts to ensure cybersecurity risks are appropriately mitigated.
- Lead product threat modeling activities, cybersecurity risk assessments, and security architecture reviews for assigned products and solutions.
- Maintain product security risk registers, ensuring identified threats, vulnerabilities, mitigation actions, risk owners, and risk acceptance decisions remain current, traceable, and well documented.
- Coordinate product-level vulnerability management, disclosure handling, and cybersecurity incident response activities.
- Represent assigned products in Product Security Incident Response Team (PSIRT) investigations and remediation efforts.
- Ensure the creation, maintenance, and review of Software Bills of Materials (SBOMs) and oversee Software Composition Analysis (SCA) activities.
- Monitor and assess cybersecurity risks associated with third-party, commercial, and open-source software components.
- Partner with development teams to identify, prioritize, and remediate security findings from security testing activities.
- Ensure security-related documentation, testing results, compliance evidence, and decision records are maintained throughout the product lifecycle.
- Establish and monitor product security metrics and key performance indicators and communicate status, risks, trends, and recommendations to stakeholders and leadership.
- Escalate significant product security risks and compliance concerns to the Product Security Officer (PSO) as appropriate.
- Provide expert guidance to product teams regarding secure coding practices, vulnerability remediation, security architecture, and cybersecurity standards.
- Develop and deliver product security awareness and training sessions and mentor engineers and stakeholders on secure development methodologies.
- Collaborate with global teams to support product certifications, customer security assessments, audits, and regulatory compliance activities.
- Promote a culture of cybersecurity awareness, continuous improvement, collaboration, and accountability across product development organizations.
Requirements
- Demonstrated experience leading product security, cybersecurity engineering, secure software development, or related technical security programs.
- Strong knowledge of secure development lifecycle practices and security-by-design principles.
- Experience applying and interpreting standards such as IEC 62443-4-1, IEC 62443-4-2, OWASP, or comparable industry frameworks.
- Ability to perform threat modeling, cybersecurity risk assessments, security architecture reviews, and vulnerability management activities.
- Knowledge of software security testing methodologies, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and penetration testing.
- Experience managing cybersecurity risks associated with commercial, third-party, and open-source software components.
- Familiarity with Software Bill of Materials (SBOM) generation, management, and compliance practices.
- Ability to interpret security findings, prioritize remediation activities, and effectively communicate risk-based recommendations.
- Strong stakeholder management, collaboration, presentation, and communication skills.
- Experience working in cross-functional product development environments involving software, firmware, and/or industrial automation technologies.
- Ability to develop documentation, compliance evidence, and security-related reports with a high degree of quality and traceability.
- Commitment to continuous learning and staying current with emerging cybersecurity threats, technologies, and industry best practices.
- Experience within industrial automation, operational technology (OT), industrial control systems (ICS), embedded systems, or critical infrastructure environments.
- Knowledge of DevOps practices, and modern software delivery pipelines.
- Experience supporting cybersecurity compliance initiatives and external security assessments.
- Experience participating in or leading Product Security Incident Response Team (PSIRT) activities.
- Experience influencing technical strategy and driving cybersecurity improvements across global organizations.
Skills
- Product Security
- Cybersecurity Engineering
- Secure Software Development
- Secure Development Lifecycle (SDL)
- Security-by-design principles
- IEC 62443-4-1
- IEC 62443-4-2
- OWASP
- Threat Modeling
- Cybersecurity Risk Assessments
- Security Architecture Reviews
- Vulnerability Management
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Software Composition Analysis (SCA)
- Penetration Testing
- Software Bill of Materials (SBOM)
- Stakeholder Management
- Collaboration
- Presentation
- Communication
- DevOps
- Product Security Incident Response Team (PSIRT)
Location
- Berlin, Germany
Work Type
- Full-time
Experience Level
- Lead
About the Company
- Emerson is a global leader in automation technology and software.
- Through our deep domain expertise and legacy of flawless execution, Emerson helps customers in critical industries like life sciences, energy, power and renewables, chemical and advanced factory automation operate more sustainably while improving productivity, energy security and reliability.
- With global operations and a comprehensive portfolio of software and technology, we are helping companies implement digital transformation to measurably improve their operations, conserve valuable resources and enhance their safety.
- We offer equitable opportunities, celebrate diversity, and embrace challenges with confidence that, together, we can make an impact across a broad spectrum of countries and industries.
- We are motivated by a spirit of collaboration that helps our diverse, multicultural teams across the world drive innovation that makes the world healthier, safer, smarter, and more sustainable.
- We have built an engaged community of inquisitive, dedicated people who thrive knowing they are welcomed, trusted, celebrated, and empowered to solve the world’s most complex problems — for our customers, our communities, and the planet.
- We are a proud corporate citizen in every city where we operate and are committed to our people, our communities, and the world at large.
- At Emerson, you’ll see firsthand that our people are at the center of everything we do.
Equal Opportunity
- We welcome applicants from all backgrounds, experiences, and career paths and recognize that skills and potential can be developed in many ways.
- We are committed to creating a workplace where every individual can contribute, grow, and succeed while helping deliver innovative solutions that advance industries and improve lives around the world.
- We offer equitable opportunities, celebrate diversity, and embrace challenges with confidence that, together, we can make an impact across a broad spectrum of countries and industries.