Senior Product Security Engineer - Software

Rockwell Automation is a global technology leader focused on helping the world's manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility -our people are energized problem solvers that take pride in how thework we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that's you we would love to have you join us!

Job Description

The Product Security Engineers work to ensure that the data, systems, and applications used in our products are secure. Product Security Engineers design and implement security controls and features within our applications. They work to ensure that weaknesses are remediated through high quality development practices. The Product Security Engineers work in all phases of the secure software development life cycle.

• Work on all aspects of the secure software development lifecycle including design, database schema, business logic, user interface, performance, and quality
• Work with security and product teams to develop secure products and features and strengthen the security of existing solutions
• Collaborate with engineering and conduct regular security assessments such as broader technical reviews and deeper code reviews
• Track and remediates security weaknesses
• Assesses and evaluates current and new security measures to improve security
• Identify, define, and document system security requirements and recommend solutions
• Maintain up to date knowledge with current industry security practices and recommendations

• Bachelor's Degree or equivalent years of relevant work experience.
• Legal authorization to work in the U.S. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

• Typically requires 5+ years of professional development experience
• Familiarity with common security libraries, security controls, and common security flaws (OWASP, CWE, CVE)
• Collaborate with engineering and conduct regular security assessments such as broader technical reviews and deeper code reviews
• Experience with software development in one or more languages (C#, Java, C/C++, PHP)
• Familiarization with CI/CD and DevOps practices (DSOMM)
• Experience with SAST, DAST, SCA and container security practices and tools (such as SonarQube, Blackduck, JFrog XRay, SALT, PrismaCloud, etc)
• An understanding of network and web related protocols (such as TCP/IP, UDP, HTTP, HTTPS, protocols)
• Experience working with developers
• Experience identifying security issues through code review
• Database design/data modeling experience and performance tuning
• Experience with version control systems such as Github, Mercurial, Subversion, etc
• Technical skills within the following: .NET Core, React, Docker, Kubernetes, Go, SQL, HTML, CSS, JavaScript
• Experience writing or reviewing software tests, particularly abuse cases or negative test cases
• Experience with cloud computing
• Desired Certifications - Sec+, SSCP, GSEC, CASE, CEH, CSSLP, CISSP
• Experience in a manufacturing environment is a bonus

• Health Insurance including Medical, Dental and Vision
• 401k
• Paid Time off
• Parental and Caregiver Leave
• Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.
• To learn more about our benefits package, please visit at www.raquickfind.com.

This position is part of a job family. Experience will be the determining factor for position level and compensation.

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

#LI-LifeAtROK

#LI-Hybrid

#LI-MG4

We are an Equal Opportunity Employer including disability and veterans.

If you are an individual with a disability and you need assistance or a reasonable accommodation during the application process, please contact our services team at +1 (844) 404-7247.

Rockwell Automation's hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.