Apply on Employer Site

Rockwell Automation · 1 week ago

Engineering Manager Product Security

Mequon, WI

Full-time

Hybrid

Lead/Staff, Director/Executive

5+ years exp

Rockwell Automation is a global technology leader focused on enhancing productivity and sustainability for manufacturers. They are seeking a Product Security Leader for the Power Control Business, responsible for overseeing product security initiatives, managing a team of engineers, and ensuring adherence to security standards and best practices across various product lines.

HardwareIndustrial AutomationSales AutomationSoftware

No H1B

Hiring Manager

Prajakta D.

Responsibilities

Accept leadership for organizational Security programs and work across peer managers across the world to move initiatives forward

Manage Design for Security (DfS) requirements. Ensure adherence to security standards and provide guidance and input to standards enhancements. Provide guidance on prioritization and funding

Work with the portfolio managers to maintain a security roadmap for all PCB products

Create the prioritized list of security projects for PCB and ensure their implementation by the SAFe teams

Be the change agent towards best security development practices, methods, and skills

Drive the implementation of the security processes, guidelines, and tools

Research current security trends in Industrial Control Systems, embedded systems, hardware design, and application security and collaborate with security experts to ensure security requirements are put in place

Monitor cybersecurity regulations and ensure that relevant information is communicated to the BU, and informed business strategy is prepared

Characterize potential risk exposure and develop mechanisms to track performance against established metrics and control Provide guidance to senior levels of management regarding product security risk and exposure

Oversee 62443 certifications (collaborate with engineering leadership, LPM and SAFe team on plans and track progress)

Represent the department for customer presentations and meetings with regards to security

Be a security thought leader within Rockwell Automation through educating internal personnel and influencing proper security development techniques and tools

Communication and collaboration and an ability to work within a global remote team environment are also critical to achieve our goals

Qualification

Product Security ManagementSecurity Development LifecycleIndustrial Cybersecurity KnowledgeSecurity Standards ImplementationApplication SecurityEmbedded Systems SecuritySoftware Development ExperienceCommunication Protocols KnowledgeTeam BuildingChange TransformationProblem Solving

Required

Bachelor's degree or equivalent years of relevant work experience

Legal authorization to work in the US is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening

Preferred

Typically requires a minimum of 5 years management experience

Bachelor's degree in Security, Electrical Engineering, Computer Engineering, Computer Science or equivalent

Naturally exude team building, motivating, and conflict-resolving qualities

Comfortable talking about technical matters with business roles and business matters with technical roles

Industrial cybersecurity or information technology knowledge with subsequent certifications

5+ years of application and/or software/firmware development experience in a professional setting

2+ years of experience in demonstrating Security Development Lifecycle concepts (i.e., secure code reviews, threat modeling, and penetration testing)

5+ years related experience in industrial automation, software development/application or security

Demonstrated knowledge in the application of both software engineering and security principles, theories, concepts, and techniques

Experience implementing security standards such as the NIST Cybersecurity Framework and/or IEC 62443

Knowledge of communication protocols Ethernet or Common Industrial Protocol (CIP), and modern Intel and ARM architectures

Security certification(s) such as Applicable GIAC Certifications, CySec Specialist (TÜV Rheinland), OSCP, CISSP, CEH, or an advanced degree in cybersecurity

Advanced coursework or training related to secure software engineering, application security, cloud security, embedded systems, and/or securing operating systems

Experience with change transformation