Product Security Lead
Emerson · Berlin, Germany · onsite
If you are a Product Security Lead professional Iooking for an opportunity to grow your career, Emerson has an exciting opportunity for you in Berlin, Germany. In this role, you will lead product security activities across the product lifecycle, helping ensure that secure-by-design principles are embedded into development processes, products, and solutions. You will work cross-functionally with engineering, product management, quality, compliance, and cybersecurity teams to drive security excellence, manage cybersecurity risks, and support compliance with industry-recognized standards. This position offers the opportunity to influence product strategy, strengthen security capabilities, and contribute to solutions that make a meaningful impact for customers worldwide.
In This Role, Your Responsibilities Will Be:
- Develop, maintain, and own comprehensive product security plans, including defining security scope, objectives, deliverables and activities.
- Drive the implementation, execution, and continuous improvement of secure development lifecycle (SDL) practices in alignment with IEC 62443-4-1 requirements.
- Define and verify product security release criteria for new product development programs and ensure all required security activities, reviews, and evidence are completed before product releases.
- Establish, review, and maintain product security requirements while evaluating secure architecture and design concepts to ensure cybersecurity risks are appropriately mitigated.
- Lead product threat modeling activities, cybersecurity risk assessments, and security architecture reviews for assigned products and solutions.
- Maintain product security risk registers, ensuring identified threats, vulnerabilities, mitigation actions, risk owners, and risk acceptance decisions remain current, traceable, and well documented.
- Coordinate product-level vulnerability management, disclosure handling, and cybersecurity incident response activities.
- Represent assigned products in Product Security Incident Response Team (PSIRT) investigations and remediation efforts.
- Ensure the creation, maintenance, and review of Software Bills of Materials (SBOMs) and oversee Software Composition Analysis (SCA) activities.
- Monitor and assess cybersecurity risks associated with third-party, commercial, and open-source software components.
- Partner with development teams to identify, prioritize, and remediate security findings from security testing activities.
- Ensure security-related documentation, testing results, compliance evidence, and decision records are maintained throughout the product lifecycle.
- Establish and monitor product security metrics and key performance indicators and communicate status, risks, trends, and recommendations to stakeholders and leadership.
- Escalate significant product security risks and compliance concerns to the Product Security Officer (PSO) as appropriate.
- Provide expert guidance to product teams regarding secure coding practices, vulnerability remediation, security architecture, and cybersecurity standards.
- Develop and deliver product security awareness and training sessions and mentor engineers and stakeholders on secure development methodologies.
- Collaborate with global teams to support product certifications, customer security assessments, audits, and regulatory compliance activities.
- Promote a culture of cybersecurity awareness, continuous improvement, collaboration, and accountability across product development organizations.
Who You Are:
You anticipate and balance the needs of multiple stakeholders while building partnerships and working collaboratively with others to meet shared objectives. You analyze complex and sometimes contradictory information to effectively solve problems and make sound decisions. You consistently deliver results, even in challenging circumstances, by maintaining a focus on priorities and driving accountability. You adapt your approach and communication style to meet the needs of different audiences while fostering trust, credibility, and alignment across teams.
For This Role, You Will Need:
- Demonstrated experience leading product security, cybersecurity engineering, secure software development, or related technical security programs.
- Strong knowledge of secure development lifecycle practices and security-by-design principles.
- Experience applying and interpreting standards such as IEC 62443-4-1, IEC 62443-4-2, OWASP, or comparable industry frameworks.
- Ability to perform threat modeling, cybersecurity risk assessments, security architecture reviews, and vulnerability management activities.
- Knowledge of software security testing methodologies, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and penetration testing.
- Experience managing cybersecurity risks associated with commercial, third-party, and open-source software components.
- Familiarity with Software Bill of Materials (SBOM) generation, management, and compliance practices.
- Ability to interpret security findings, prioritize remediation activities, and effectively communicate risk-based recommendations.
- Strong stakeholder management, collaboration, presentation, and communication skills.
- Experience working in cross-functional product development environments involving software, firmware, and/or industrial automation technologies.
- Ability to develop documentation, compliance evidence, and security-related reports with a high level of quality and traceability.
- Commitment to continuous learning and staying current with emerging cybersecurity threats, technologies, and industry best practices.
Preferred Qualifications That Set You Apart:
- Experience within industrial automation, operational technology (OT), industrial control systems (ICS), embedded systems, or critical infrastructure environments.
- Knowledge of DevOps practices, and modern software delivery pipelines.
- Experience supporting cybersecurity compliance initiatives and external security assessments.
- Experience participating in or leading Product Security Incident Response Team (PSIRT) activities.
- Experience influencing technical strategy and driving cybersecurity improvements across global organizations.
Our Culture and Commitment To You
At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives—because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams working together are key to driving growth and delivering business results.
At Emerson, our values of innovation, integrity, collaboration, and inclusion guide how we work and grow together. We welcome applicants from all backgrounds, experiences, and career paths and recognize that skills and potential can be developed in many ways. If your experience does not align perfectly with every qualification listed, we still encourage you to apply. You may be the right candidate for this role or other opportunities within Emerson.
We are committed to creating a workplace where every individual can contribute, grow, and succeed while helping deliver innovative solutions that advance industries and improve lives around the world.