Apply on Employer Site

Rockwell Automation · 15 hours ago

Senior Product Security Engineer

Milwaukee, WI

Full-time

Hybrid

Senior Level

CAD$124K/yr - CAD$186K/yr

5+ years exp

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. As a Product Security Engineer, you will enhance security frameworks and provide expertise to product development teams, ensuring the security posture of products and solutions.

HardwareIndustrial AutomationSales AutomationSoftware

No H1B

Responsibilities

Contribute to the refinement and rollout of security frameworks and policies

Participate in organization wide cybersecurity activities, including risk assessments, roadmap development, and stakeholder engagement

Partner with technical security thought leaders (e.g., benchmarking, conferences), to evolve the SDL strategy and direction

Represent the central security office function with external certifying bodies

Participate in security architecture and design review meetings. Review product architectures for security design gaps and vulnerabilities and consult with product teams to mitigate cyber risk

Develop and maintain solutions to automate security governance processes and workflows

Collaborate with DevSecOps and architecture teams to integrate automation into existing platforms and CI/CD pipelines

Maintain knowledge of security threats and vulnerabilities for OT environment

Provide product security related mentoring and security expertise

Participate in standards and research opportunities outside of RA

Qualification

Product Security ExpertiseOperational Technology CybersecuritySecure Software EngineeringCI/CD EnvironmentsPythonSecurity Architecture ReviewThreat ModelingCryptography TechnologiesSoft Skills

Required

Bachelor's Degree

Legal authorization to work in the US or Canada is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening

Preferred

Typically requires 5+ years of experience in relevant product security areas

Degree in Computer Engineering, Computer Science, Electrical Engineering, or similar discipline

Experience in Operational Technology cybersecurity

Experience in one of security domains: Secure SW Engineering, HW Security, Embedded Security, and other related fields

Experience developing software, automated tests and tools in high-level languages like Python, with or without AI Augmentation

Good understanding in disciplines such as Trusted platform module, Secure Boot, different cryptography technologies, web application security, network security, operating system internals and hardening. You're expected to have advanced knowledge in at least two or three of these areas

Experience working with development teams to review design, construct threat models and secure coding practices

Understanding of security by design principles and architecture level security concepts

Experience with CI/CD environments, SAST and DAST tools

Experience of industrial protocols, especially Common Industrial Protocol (CIP)

Industrial cybersecurity and/or information technology certifications such as 62443 CyberSecurity specialist, (ISC)² CISSP, or SANS GICSP - or you are ready to obtain it shortly

Ability to travel, including internationally, up to 20% of time