Jobs → Engineering → Product & Network Security Engineer

About the Role We are looking for a Product and Network Security Engineer for an immediate, high-impact contract opportunity with Copeland in St. Louis, MO. This role focuses on securing connected physical products above the boot chain. Key Responsibilities • Harden embedded Linux images, minimize services, enforce non-root service accounts, and apply mandatory access control (SELinux / AppArmor). • Restrict the attack surface by closing ports, applying firewall configurations (nftables / iptables), and implementing mTLS, TLS 1.3, and secure MQTT over TLS. • Generate and manage release SBOMs (SPDX / CycloneDX) utilizing Yocto / Buildroot pipelines. • Review C/C++ code, triage CVEs against the CISA KEV catalog, reproduce third-party pen test findings, and drive fixes directly with core developers. • Produce engineering evidence mapped directly to IEC 62443-4-1 / 4-2 and NIST frameworks. Requirements • 7–10 years of overall security engineering experience, with 4+ years dedicated to embedded systems, IoT, or industrial products. • Verified, hands-on history hardening physical device images. • Solid grasp of C/C++ memory safety, STRIDE threat modeling, and Wireshark / tcpdump packet analysis. • A proven track record of taking complex penetration test findings from report to verified code closure.