Senior Product Security Engineer - PSIRT

Rockwell Automation is a global technology leader focused on helping the world's manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that's you we would love to have you join us!

Job Description

Join our growing team in the Office of Product Safety and Security as a Senior Product Security Engineer. This high-performing team of like-minded, passionate individuals are responsible for ensuring that our products and solutions are delivered with safety and security in mind to protect our customers and the critical services they provide. This central office works across the entire organization, with everyone from product developers to executives. This Product Security Research team pursues leading-edge research aimed at addressing the top security and privacy challenges facing industry. In this position, you will conduct novel research and testing of Rockwell offers and systems. The work is fast paced, diverse, and has executive level visibility.

As a Product Security Engineer, responsibilities include:

• Conduct advanced and extensive testing of products and systems.
• Researching emerging cybersecurity technologies and threats.
• Evaluating security solutions and contributing to research blogs, internal reports, and conference talks
• Contribute new and novel research proposals to the research team's body of work
• Advise product teams on risk analysis, mitigation and remediations related to product security vulnerabilities.
• Working cross-functionally with all business units, development teams, product security team members and leadership to communicate research priorities, coordination, and results.
• Development, maintenance and continuous improvement of the product security tools and process.

Basic Qualifications:

• Bachelor's Degree or equivalent experience
• Legal authorization to work in the US is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

Preferred Qualifications:

• Degree in Computer Science, Engineering or equivalent
• Typically requires a minimum of 8 years of experience in penetration testing and/or security research.
• Experience with application security, cloud penetration testing, and common cloud-based vulnerabilities, weaknesses and exploitation.
• Familiarity MITRE ATT&CK, MITRE ICS ATT&CK model, OWASP Top 10, ICS Cyber Kill Chain, common classes of product security vulnerabilities and attack/defense methodologies
• Familiarity with ongoing threats to Operational Technology (OT) systems, and a solid understanding of how Information Technology (IT) may impact sensitive systems.
• Relevant information security certifications, such as SANS/GIAC Certified Incident Handler (GCIH), EC-Council Certified Incident Handler (ECIH), SANS GPEN, or Offensive Security OSCP/OSCE is a plus
• This position is part of a job family. Experience will be the determining factor.

#LI-MG1

We are an Equal Opportunity Employer including disability and veterans.

If you are an individual with a disability and you need assistance or a reasonable accommodation during the application process, please contact our services team at +1 (844) 404-7247.