Senior Cybersecurity Engineer

Eaton is an intelligent power management company dedicated to protecting the environment and improving the quality of life for people everywhere. We make products for the data center, utility, industrial, commercial, machine building, residential, aerospace and mobility markets.

What you'll do:

As a Product Cybersecurity Engineer at Eaton, you will play a pivotal role in safeguarding products by embedding cybersecurity throughout the entire product lifecycle-from concept and design to deployment and maintenance. You will be part of a global, high-performing team of security experts, championing Eaton's "Security by Design" strategy across innovative products and solutions.
In this role, you will act as a trusted cybersecurity partner, collaborating with cross-functional teams to drive secure product development. You will coordinate and lead cybersecurity initiatives across the product groups and advocate for best-in-class security practices that protect customers worldwide.

• Lead threat modeling and risk assessment activities during early design phases, ensuring cybersecurity requirements are identified and integrated in alignment with relevant standards.
• Perform vulnerability assessments and penetration testing across Eaton products and solutions, including IoT devices, embedded systems, web/mobile applications, and industrial systems, to identify and validate security risks.
• Partner with product and engineering teams to design and implement secure solutions, providing hands-on guidance for complex cybersecurity features.
• Deliver cybersecurity training and promote security awareness across engineering, product management, and other business functions.
• Continuously monitor the evolving threat landscape, emerging technologies, and industry standards, driving improvements in internal cybersecurity frameworks and processes.
• Support product cybersecurity certification activities, ensuring compliance with standards such as UL 2900 and IEC 62443.

Qualifications:

• Bachelor's or master's degree in Cybersecurity, Computer Science, Electronics Engineering, Electrical Engineering, or a related field.
• More than 5 years of relevant experience in product cybersecurity, embedded security, IoT security, or application security.
• Proven experience across multiple phases of the Secure Product Development Lifecycle, including threat modeling, security testing, and implementation validation.
• Strong experience in IoT, embedded, and connected product security.
• Hands-on experience in penetration testing and security assessment using tools such as Burp Suite, Kali Linux, Nessus, Coverity, Black Duck, and Defensics.
• Solid understanding of common attack vectors and effective mitigations across web, IoT, operating systems, and cloud environments.
• Strong knowledge of communication and protocol security, including HTTPS, MQTT, SSH, Wi-Fi, Bluetooth, Zigbee, and ICS protocols.
• Knowledge of authentication, access control, applied cryptography, secure boot, firmware integrity, and secure update mechanisms is preferred.
• Proven ability to conduct threat modeling and risk assessments and translate findings into actionable security requirements.
• Programming or scripting experience in one or more languages.
• Familiarity with AI-assisted cybersecurity workflows and security considerations for AI-enabled products is a plus.
• Strong collaboration skills and ability to work effectively with global, cross-functional teams.
• Strong communication and presentation skills across engineering and business stakeholders.
• Fluent in English, able to collaborate and communicate effectively with global teams.

At Eaton, we don't just want to offer you a job, but a journey and experience. Our goal is to give you the space to find that sweet spot where your passion meets purpose.