Senior Cybersecurity Engineer

What you’ll do:

As a Product Cybersecurity Engineer at Eaton, you will play a pivotal role in safeguarding products by embedding cybersecurity throughout the entire product lifecycle—from concept and design to deployment and maintenance. You will be part of a global, high-performing team of security experts, championing Eaton’s “Security by Design” strategy across innovative products and solutions.
In this role, you will act as a trusted cybersecurity partner, collaborating with cross-functional teams to drive secure product development. You will coordinate and lead cybersecurity initiatives across the product groups and advocate for best-in-class security practices that protect customers worldwide.  

• Lead threat modeling and risk assessment activities during early design phases, ensuring cybersecurity requirements are identified and integrated in alignment with relevant standards.
• Perform vulnerability assessments and penetration testing across Eaton products and solutions, including IoT devices, embedded systems, web/mobile applications, and industrial systems, to identify and validate security risks.
• Partner with product and engineering teams to design and implement secure solutions, providing hands-on guidance for complex cybersecurity features.
• Deliver cybersecurity training and promote security awareness across engineering, product management, and other business functions.
• Continuously monitor the evolving threat landscape, emerging technologies, and industry standards, driving improvements in internal cybersecurity frameworks and processes.
• Support product cybersecurity certification activities, ensuring compliance with standards such as UL 2900 and IEC 62443.   

Qualifications:

• Bachelor’s or master’s degree in Cybersecurity, Computer Science, Electronics Engineering, Electrical Engineering, or a related field.
• More than 5 years of relevant experience in product cybersecurity, embedded security, IoT security, or application security.
• Proven experience across multiple phases of the Secure Product Development Lifecycle, including threat modeling, security testing, and implementation validation.
• Strong experience in IoT, embedded, and connected product security.
• Hands-on experience in penetration testing and security assessment using tools such as Burp Suite, Kali Linux, Nessus, Coverity, Black Duck, and Defensics.
• Solid understanding of common attack vectors and effective mitigations across web, IoT, operating systems, and cloud environments.
• Strong knowledge of communication and protocol security, including HTTPS, MQTT, SSH, Wi-Fi, Bluetooth, Zigbee, and ICS protocols.
• Knowledge of authentication, access control, applied cryptography, secure boot, firmware integrity, and secure update mechanisms is preferred.
• Proven ability to conduct threat modeling and risk assessments and translate findings into actionable security requirements.
• Programming or scripting experience in one or more languages.
• Familiarity with AI-assisted cybersecurity workflows and security considerations for AI-enabled products is a plus.
• Strong collaboration skills and ability to work effectively with global, cross-functional teams.
• Strong communication and presentation skills across engineering and business stakeholders.
• Fluent in English, able to collaborate and communicate effectively with global teams.